CVE-2021-39051: ibm spectrum_copy_data_management Server-Side Request Forgery (SSRF)
Vulnerability summary
CVE-2021-39051 is a medium (CVSS 6.5) Server-Side Request Forgery (SSRF) vulnerability in ibm spectrum_copy_data_management. EPSS estimates a 0.85% chance of exploitation in the next 30 days, higher than 57.8% of scored vulnerabilities.
Timeline
- 14-03-2022PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST4.8MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS trend
Probability
0.85%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.85% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm1 product
- spectrum_copy_data_management2.2.0.0 | 2.2.14.3 | ≥ 2.2.0.0, < 2.2.15.0
1 vendor · 1 product