[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffDbidlc_3p8NdjN8QZ08n2MbN4TTYYQEYdJkB14AU9I":3,"g5a-risk:CVE-2021-34995":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":64,"weaknessesCount":56,"isActivelyExploited":73,"cisaInfo":26,"otxData":26,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":108,"notableEvents":109},"CVE-2021-34995","What is CVE-2021-34995?","This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-13756.","This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is req...","2022-01-13T22:15:13.047","2022-01-22T03:55:10.303",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"zdi-disclosures@trendmicro.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":41,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.68864,[47,47,47,47,47,47,47],"High",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"commvault","commcell","11.22.22","cpe:2.3:a:commvault:commcell:11.22.22:*:*:*:*:*:*:*",1,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-21-1330\u002F","Zerodayinitiative",[62,63],"Third Party Advisory","VDB Entry",[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2021-34995? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-34995, a high severity cyber security vulnerability from 2022. High exploit probability (68.9%). This vulnerability allows...","CVE-2021-34995, CVE-2021-34995 vulnerability, CVE-2021-34995 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, commvault security, commcell vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-34995",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-34995","Cybersecurity","CVE-2021-34995, CVE-2021-34995 vulnerability, CVE-2021-34995 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":26,"Negate":26,"Nodes":102},[103],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A878ED91-1EF4-4B0E-9613-C4A089BC29F3",[],[110,117],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"4a583c78-173f-4f7d-9e47-bff2faca7db9","HIGH_EPSS_DELTA","2025-11-19T04:05:58.632548+00:00","Daily EPSS score increased by 0.181 on 2023-12-30","EPSS Score Increased","red",{"id":118,"eventType":119,"eventTime":120,"details":121,"label":122,"color":123},"c3214275-6547-49fc-b346-9577091c50be","LOW_EPSS_DELTA","2025-11-22T04:05:47.008726+00:00","Daily EPSS score decreased by 0.181 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":125,"version":39},1793201011471,{"score":127,"band":128,"action":129,"scoredAt":130},64,"Medium","Plan remediation","2026-07-01T10:27:30.822987+00:00"]