CVE-2016-8998: IBM Tivoli Storage Manager

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.

Affected products

• IBM Tivoli Storage Manager: version 7.1.1 only; version 7.1.1.1 only; version 7.1.1.2 only; version 7.1.1.100 only; version 7.1.1.200 only; version 7.1.1.300 only; …

Published 2017-02-24. Last modified 2026-06-17.