CVE-2020-4956: IBM Spectrum Protect Operations Center

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit this vulnerability to cause the consumption of all memory resources. IBM X-Force ID: 192156.

Affected products

• IBM Spectrum Protect Operations Center: from 7.1.0.000, before 7.1.13.000 (fixed in 7.1.13.000); from 8.1.0.000, before 8.1.10.200 (fixed in 8.1.10.200)

Published 2021-02-15. Last modified 2026-06-17.