[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKeDCAjtF33S5TYfto_MXWMdlK0EtoSQ6gnnCG59clzo":3,"g5a-risk:CVE-2025-3928":177},{"success":4,"data":5,"meta":174},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":53,"references":54,"referencesCount":82,"weaknesses":83,"weaknessesCount":87,"isActivelyExploited":4,"cisaInfo":88,"otxData":26,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":145,"notableEvents":146},"CVE-2025-3928","What is CVE-2025-3928?","Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: \"Webservers can be compromised through bad actors creating and executing webshells.\" Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.","Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: \"Webser...","2025-04-25T16:15:27.817","2025-05-28T20:51:43.7",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"9119a7d8-5eab-497f-8521-727c672e3725","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.01932,[35,35,35,35,35,35,35],"High",[39,43,49],{"vendor":40,"product":40,"version":41,"criteria":42,"vulnerable":4},"commvault","*","cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":48},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",false,{"vendor":50,"product":51,"version":46,"criteria":52,"vulnerable":48},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",3,[55,60,66,69,72,75,78],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fdocumentation.commvault.com\u002Fsecurityadvisories\u002FCV_2025_03_1.html","Commvault",[59],"Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3928","CISA",[64,65],"Third Party Advisory","US Government Resource",{"url":67,"source":62,"tags":68},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Falerts\u002F2025\u002F05\u002F22\u002Fadvisory-update-cyber-threat-activity-targeting-commvaults-saas-cloud-application-metallic",[64,65],{"url":70,"source":57,"tags":71},"https:\u002F\u002Fwww.commvault.com\u002Fblogs\u002Fcustomer-security-update",[59],{"url":73,"source":57,"tags":74},"https:\u002F\u002Fwww.commvault.com\u002Fblogs\u002Fnotice-security-advisory-update",[59],{"url":76,"source":57,"tags":77},"https:\u002F\u002Fwww.commvault.com\u002Fblogs\u002Fsecurity-advisory-march-7-2025",[59],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcommvault-says-recent-breach-didnt-impact-customer-backup-data\u002F","Bleepingcomputer",[64],7,[84],{"id":85,"name":85,"description":86},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":89,"requiredAction":89,"vulnerabilityName":89,"dateAdded":26},"",[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2025-3928? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-3928, a high severity cyber security vulnerability from 2025. Commvault Web Server has an unspecified vulnerability that c...","CVE-2025-3928, CVE-2025-3928 vulnerability, CVE-2025-3928 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, commvault security, linux security, microsoft security, commvault vulnerability, linux_kernel vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2025-3928",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-3928","Cybersecurity","CVE-2025-3928, CVE-2025-3928 vulnerability, CVE-2025-3928 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":118,"Negate":26,"Nodes":119},"AND",[120,139],{"Operator":121,"Negate":48,"CPEMatch":122},"OR",[123,127,131,135],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":26},"A0178101-5B30-4072-B014-4562F43074D9","11.20.0","11.20.217",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"4A2914BE-4680-40C4-8AFF-F76393197D84","11.28.0","11.28.141",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":133,"VersionEndExcluding":134,"VersionEndIncluding":26},"0F02E229-C8E4-4BB1-821F-16BAB20E8CD4","11.32.0","11.32.89",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":137,"VersionEndExcluding":138,"VersionEndIncluding":26},"8DB5094F-DED6-4EAF-A06A-C6456F77C76D","11.36.0","11.36.46",{"Operator":121,"Negate":48,"CPEMatch":140},[141,143],{"Vulnerable":48,"Criteria":47,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":48,"Criteria":52,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[147,154,161,167],{"id":148,"eventType":149,"eventTime":150,"details":151,"label":152,"color":153},"e3ecf6af-4836-4eeb-a373-b7ee41e554f1","NEW_NVD","2025-04-26T02:15:25.974617+00:00","New CVE added to NVD","Published to NVD","blue",{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"7c1ce9be-37c8-40fa-83e5-43a873f7202f","NEW_CISA","2025-04-28T23:45:03.4828+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":162,"eventType":163,"eventTime":164,"details":165,"label":166,"color":160},"560a6f95-4485-443c-a3b8-4aca39079373","HIGH_EPSS_DELTA","2025-06-11T10:09:40.364267+00:00","Daily EPSS score increased by 0.115 on 2025-04-27","EPSS Score Increased",{"id":168,"eventType":169,"eventTime":170,"details":171,"label":172,"color":173},"065de378-37af-4bcf-b9d7-5d421bcd4d75","LOW_EPSS_DELTA","2026-06-16T04:04:12.684883+00:00","Daily EPSS score decreased by 0.268 on 2025-04-27","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":175,"version":176},1793195221944,"2.0",{"score":178,"band":37,"action":179,"scoredAt":180},74,"Emergency patch","2026-07-01T10:36:02.23831+00:00"]