CVE-2020-25780: Commvault Commcell

High severity, CVSS 7.5. EPSS: 9.9% chance of exploitation in the next 30 days.

In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a log file can instead view a file outside of the log-files folder.

Affected products

• Commvault Commcell: before 14.68 (fixed in 14.68); from 15.0, before 15.58 (fixed in 15.58); from 16.0, before 16.44 (fixed in 16.44); from 17.0, before 17.29 (fixed in 17.29); from 18.0, before 18.13 (fixed in 18.13)

Published 2020-10-29. Last modified 2026-06-17.