CVE-2015-7253: Commvault Edge Server

High severity, CVSS 10.0. EPSS: 4% chance of exploitation in the next 30 days.

The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie.

Affected products

• Commvault Edge Server: version 10 only

Published 2015-11-04. Last modified 2026-06-17.