Software Upgrades and Updates

Hi, We are currently running Commvault 11.32.102 and we are affected by the following CVE's:CVE-2025-48988CVE-2024-54677CVE-2025-49124CVE-2025-46701CVE-2024-50379CVE-2024-56337CVE-2025-31651CVE-2025-49125CVE-2025-24813CVE-2025-53506CVE-2024-52318CVE-2025-52520CVE-2025-31650Support mentioned that the vulnerabilities does NOT affect Commvault.But this version of Tomcat (10.1.31.0) is still vulnerable and is solved in version 10.1.42 which requires 11.42 (which is not a LTS version). How to solve it in current LTS versions (11.32, 11.36 or 11.40)? 

Hi Team, We got one MS SQL Management studio(ODBC) Vulnerability on Commserve. Plugin Output:Path : C:\Program Files (x86)\Microsoft SQL Server Management Studio 18\Common7\IDE\Mashup\ODBC Drivers\Simba Spark ODBC Driver\LibCurl32.DllA\libcurl.dllInstalled version : 7.66.0.0Fixed version : 8.9.1As per commvault case 250807-187(this case is closed),This is not a SQL core vulnerability but a SSMS vulnerability.You can either ignore it or upgrade your SSMS and ODBC drives to remediate that.Commvault is not affected by this vulnerability. We are upgrading from 11.32 to 11.36 for production before that we did upgrade of test commserve to 11.36. .I see the SQL version there is also upgraded from sql 2019 to sql2022.SS Management studio is still 18.x.If I upgrade SSMS to 20.x(as per Support advise) will there be any impact on Commserve operations.I am reaching here since SQL server is used by Commvault stack and want to know if it works for SSMS 20.x also.Do I need to uninstall SSMS 18.x firs

In the List of Updates for the various Maintenance Release versions, there is now a section at the top of the site there is a new table section showing Security Updates. For example, for Feature Release 32 the latest Maintenance Release is 11.32.106 and this site shows the updates:https://documentation.commvault.com/2024e/essential/files/service_pack/updates/11_32_106.htmWhich shows this new table with three new security updates:Security UpdatesIssue Hotfix Made changes to use v7 encryption instead of v3 encryption. 12324 PSIRT fixes for REST API Qcommand and QAPI login. 12323 Restricted public user access to APIs. 12321  But what is confusing is whether these three Security Updates are only contained in release 11.32.106 or are they contained in any earlier maintenance releases? For example, the updates for 11.32.102 contains the same three security updates:https://documentation.commvault.com/2024e/essential/files/service_pack/updates/11_32_102.htm While

Hello Team,Can we enable archive_mode=always for our current environment (which is on 11.32.96) to ensure PITR between log backups and failover? Also, below KB article confirms that starting SP34 onwards the backed up logs will be cleaned up from all the participating clients. Does that mean it is still missing in SP32? Can it be backported? Restore to a time between log only backup and failover may not restore the records inserted after log backupThank you for your time. Kamal

After I upgraded CommCell from 11.28 to 11.32, I encountered this error. I have checked and confirmed that the account for accessing vCenter is still working (I can see the VMs in vCenter when I try to create a new subclient). However, the new subclient I created for testing also failed with the same error.

Does anyone know if Commvault is going to include the ability to backup Jira and Confluence (Atlassian) any time soon?

It looks like the version on libcurl.dll in the base commvault path needs to be upgraded in general:/opt/commvault/commvault/Base64/VMware/vddk/VDDK602/lib64/libcurl.Has anyone done this yet? Or will an upgrade of CV resolve the issue?

We see that the Group Policy Object (GPO) backup feature is enabled by default on Active Directory clients. We would appreciate an explanation as to why this decision was made, particularly given that the feature appears to require an additional license for full functionality.The automatic activation of this feature has led to complications:Some environments are now reporting backup jobs as “Completed with errors” due to attempts to back up GPOs without meeting the necessary prerequisites. In cases where the customer does not wish to back up GPOs, there is no straightforward option to disable this functionality. Instead, we need to add an “Additional Setting” in the Properties. If the customer does wish to use GPO backup, they must ensure that the service account has the appropriate permissions, modify registry settings to support long paths, or create specific folders. Should the customer later require a GPO restore, it appears that an additional license is necessary. This requirement

Hello we are currently on commvault version 11.32.106 in windows environment and i noticed we just got a HIGH Vulnerability on the mongoDB version Plugin Output:   Installed version : 6.0.19  Fixed version     : 6.0.20 Does anyone know if the mongoDB vulnerability will get addressed in a future maintenance release for 11.32??  or can I upgrade the mongoDB manually ?  Please advise.    ThanksBC

Dear Team,We are currently deploying a new Commserve environment with separated roles on Windows Server 2025.During the installation process, the setup gets indefinitely stuck at the step "Downloading Maintenance Release" with no progress or error messages. We’ve verified: Stable internet connectivity. Sufficient resources on the server. Moreover, I’m seeing this last message on installation.log:“Error: Couldn’t download file: https://downloadcenter.commvault.com/CVUpdates/11.0.0/BUILD80/SP32_5494260_R1191/WinX64/CumulativeUpdatePacks/CU106/UpdateINI/WinX64_11.0.0B80-SP32_SP32-HotFix-12491.ini?__cv__=xxxxxxx_xxxxxxx. It will be retried after 30 seconds...” Questions: Are there known issues with Windows Server 2025 compatibility or this specific installation step? What troubleshooting steps (logs, workarounds) do you recommend to resolve this? Thank you for your guidance,Leandro.

What is the best full media package that i should download with out any problem in it ??LTS Release 11.40 - Commvault Media kit   or    LTS Release 11.36 - Commvault Media kit   or   Innovation 11.38 - Full Media kitwhich one of this three has no error occurred ??

I have commvault 11.28 system with windows server 2019 and SQL server 2016I want to upgrade it to 11.36what are the requirements before upgrading and what are the all steps.

When will the be support for Hypervisor backup from HPE Morpheus ? (VM Essentials/Enterprise)

Hello,Commvault 11.28.115We have Private Metrics Reporting server installed on separated VM. The VM has Windows Server 2016 and SQL 2016. We need to migrate to newer VMware environment, so I assumed it’s good chance to do software refresh. So I deployed new VM with Windows Server 2022 and my plan was to install Commvault with Metrics Reporting and import DBs from old server and then switch to new server.First problem was I was unable to import DB because there was some problem with DB upgrade. So I decided to create new DB. But the problem is the webconsole isn’t working. Site is loading and tomcat service after some time stops, or, after restarting IIS, the “Please wait, server are starting...” site appears and that’s it.I looked into webserver logs and there is 26. error locating server/instance like this:WebServer:3128 3 10/30 20:59:47 ### ### dmConf::GetMongoConnectionString - Exception Message [A network-related or instance-specific error occurred while establishing a connect

We have Zabbix MYSQL database and every backup converts to Full even for incremental. [Nothing to backup in incremental job as Binary Logging is disabled on this MySQL server. The job is being converted to a full backup operation.]

Hello,I am currently working on deploying Commvault agents on new client machines within an isolated environment. Neither the CommServe nor the client systems have internet access. However, they do have full bidirectional connectivity between them and meet all prerequisites for the installation.I attempted to initiate the installation through the Commvault Console but encountered an error. I am unsure whether this is due to the system attempting to reach the internet to retrieve the necessary agent packages, or if it's the result of a misconfiguration in the software cache, preventing it from locating the required media.I would appreciate guidance on the following: Is it possible to perform remote installations from the Commvault Console using the software packages already present on the CommServe, without requiring internet access—since the agents are already installed on the CommServe? Can I generate a custom installation package using the software components already available on t

Good evening all,I new with Commvault, so i try to update 4 Commserv in LiveSync topology. We need intall the maintence release (CV_2025_04_2: SQL Injection Vulnerability) I don’t know if mandatory follow the procedure describe in Commvault DocInstalling Feature Releases On CommServe LiveSync SetupOr if it’s posible follow the steps describe in these topicSP upgrade and Livesync | Community Thanks in advance!

I’m planing to upgrade our Commserve from 11.28 to 11.36. During earlier updates I started the update with Commserve and Commcell Consol. If it succeeded, Media Agents followed one by one. Maybe our 8 MA was updated in two different day. Thereafter, clients followed.But now, in the “Changes in Commvault Platform Release 2024E (11.36)” document I can find that, “You must upgrade all MediaAgents at the same time.” Why is it mandatory?Commserve 11.36 can’t manage MA ‘s on version 11.28? Two MA, one on 11.28, other on 11.36 can’t work together? Not forever, just for a few days.Thanks in advance.

Hello, Recently, I have been encountering client certificate errors in my cases. While we can resolve them, I suspect that Commvault introduced some changes regarding client certificates starting from version 11.32. Could there be any insights or information about this issue?

One of our customers is still on 11.24. They want to upgrade to 11.38. Is this possible in one step? Or is it better to do this in more steps? Thanks!

Hello,Security scans are being carried out at many customers' sites and are increasingly pointing out third-party software installed by Commvault and missing security updates. Are the third-party components automatically updated by Commvault updates? Can the updates also be installed manually without any problems?Regards, Thomas

Hi friends,can someone send me the best practice of cs and dr MR update?I can’t find it in the documentations.I should update by this flow: first cs prod instance 1 and then instance 2,after that DR instance 2 and then instance 1 ? Thanks 

Hello Everyone, my customer is running Commvault in version 11.32.83 and Qumulo in version 7.4.0.After he updated to Qumulo 7.4.1, Qumulo backups began to fail at the scan phase with the error:  “Failed to create snapshot or build snapshot information”Rolling back to Qumulo 7.4.0 resolves the issue.I’ve found that Commvault is aware of this issue and is working on the fix. Will the fix be included in future MR’s of 11.32?Best regards, Aleksandra

Hi, is there a reference document to remediate this reported vulnerability? Path              : C:\Program Files\Commvault\ContentStore\MessageQueue\lib\optional\spring-core-5.3.39.jar  Installed version : 5.3.39  Fixed version     : 5.3.40 Thanks

Seems friday our backups stopped working for file and sql. I show cvd.exe faulting in application logs on all of the serves for the agent. I strongly think this was from some update or upgrade from Commvault. All agents in portal show “Not ready”. On each box I can see the metallic communication service going off and on every few minutes. Something changed and its for everything. No support on weekends so things just aren’t backing up. Need any help if possible.  I have restarted our on prem media gateway - no changeI have restarted a few of the SQL servers - no changedont see anything changed in Firewall. no denies etcI can reach Media agents from clientsAny ideas?  Version is 11.38.15 on all agents and media agent.