CVE-2021-20491: IBM Spectrum Protect

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792.

Affected products

• IBM Spectrum Protect: from 7.1.0.000, before 7.1.13 (fixed in 7.1.13); from 8.1.0.000, up to and including 8.1.10.100; version 8.1.11.000 only

Published 2021-04-16. Last modified 2026-06-17.