[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzptO_vDfLpzwi1avQR4qYUoVr1puM7eFrDZ3d1433QY":3,"g5a-risk:CVE-2021-34996":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":55,"weaknesses":63,"weaknessesCount":55,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":107,"notableEvents":108},"CVE-2021-34996","What is CVE-2021-34996?","This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Demo_ExecuteProcessOnGroup workflow. By creating a workflow, an attacker can specify an arbitrary command to be executed. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-13889.","This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is req...","2022-01-13T22:15:13.097","2022-01-22T03:54:01.53",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"zdi-disclosures@trendmicro.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":41,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.82258,[46,46,46,46,46,46,46],"High",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"commvault","commcell","11.22.22","cpe:2.3:a:commvault:commcell:11.22.22:*:*:*:*:*:*:*",1,[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-21-1331\u002F","Zerodayinitiative",[61,62],"Third Party Advisory","VDB Entry",[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-749","Exposed Dangerous Method or Function","The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.","This weakness can lead to a wide variety of resultant weaknesses, depending on the behavior of the exposed method. It can apply to any number of technologies and approaches, such as ActiveX controls, Java functions, IOCTLs, and so on.\nThe exposure can occur in a few different ways:","Incomplete","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2021-34996? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-34996, a high severity cyber security vulnerability from 2022. High exploit probability (82.3%). This vulnerability allows...","CVE-2021-34996, CVE-2021-34996 vulnerability, CVE-2021-34996 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, commvault security, commcell vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-34996",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-34996","Cybersecurity","CVE-2021-34996, CVE-2021-34996 vulnerability, CVE-2021-34996 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":26,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A878ED91-1EF4-4B0E-9613-C4A089BC29F3",[],[109,116],{"id":110,"eventType":111,"eventTime":112,"details":113,"label":114,"color":115},"a70e1768-9bf7-403e-9bc7-2aa167621941","HIGH_EPSS_DELTA","2025-11-19T04:05:58.632548+00:00","Daily EPSS score increased by 0.412 on 2023-12-30","EPSS Score Increased","red",{"id":117,"eventType":118,"eventTime":119,"details":120,"label":121,"color":122},"5dd2122a-ce1d-4b00-8f2e-94d1a3bc781e","LOW_EPSS_DELTA","2025-11-22T04:05:47.008726+00:00","Daily EPSS score decreased by 0.412 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":124,"version":39},1793213155058,{"score":126,"band":127,"action":128,"scoredAt":129},69,"Medium","Plan remediation","2026-10-28T06:52:52.189407+00:00"]