CNNVD-202601-1144 Information

CNNVD ID

CNNVD-202601-1144

CVE-2025-12776

  • CNNVD Published: 2026-01-07

Description (Chinese)

Commvault WebConsole是美国Commvault公司的一个基于Web的管理平台。 Commvault WebConsole存在安全漏洞,该漏洞源于将用户输入直接存储在网页中,可能导致跨站脚本攻击。

Description (English)

Commvault WebConsole is a Web-based management platform for Commvault in the United States. There is a security loophole in Commvault WebConsole, which arises from the direct storage of user input on a web page, which could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Commvault

Published

2026-01-07

Last Modified

2026-02-24

References

https://documentation.commvault.com/securityadvisories/CV_2025_06_3.html

Patch

https://documentation.commvault.com/v11/software/web_console.html

Share on: