CVE-2021-20494

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-28 · updated 2026-06-17
Weakness: CWE-787

Description

IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882.

Affected products

IBM Security Identity Manager Adapters: 6.0.0.0, 7.0.0.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/197882
https://www.ibm.com/support/pages/node/6465875
https://exchange.xforce.ibmcloud.com/vulnerabilities/197882
https://www.ibm.com/support/pages/node/6465875

Get alerted when CVE-2021-20494 or the next vulnerability affects your stack