An issue was discovered in Commvault before 11.36.60. A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role.
CVSS
No CVSS.
References
Configurations
No configuration.
History
20 Aug 2025, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-20 04:16
Updated : 2025-08-20 04:16
NVD link : CVE-2025-57791
Mitre link : CVE-2025-57791
JSON object : View
Products Affected
No product.
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')