CVE-2019-4087: IBM Spectrum Protect Operations Center

Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days.

IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. By sending an overly long request, a remote attacker could overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storage agent to crash. IBM X-Force ID: 157510.

Affected products

• IBM Spectrum Protect Operations Center: from 7.1.0.000, up to and including 7.1.9.200; from 8.1.0.000, up to and including 8.1.7.000

Published 2019-07-02. Last modified 2026-06-17.