Commvault Web Server unspecified vulnerability

Commvault Web Server has a security flaw that allows authenticated attackers to upload and run malicious code (webshells) on the server, potentially taking it over. This is a serious threat because attackers can gain full control of the system.

Remote authenticated attackers can exploit an unspecified vulnerability in Commvault Web Server to create and execute webshells, achieving arbitrary code execution on affected systems. The vulnerability affects multiple versions across Windows and Linux platforms and requires valid credentials. Patched in versions 11.36.46, 11.32.89, 11.28.141, and 11.20.217.