CVE-2021-39065

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-12-13 · updated 2026-06-17
Weakness: CWE-78

Description

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958.

Affected products

IBM Spectrum Copy Data Management: through 2.2.13

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/214958
https://www.ibm.com/support/pages/node/6525554
https://exchange.xforce.ibmcloud.com/vulnerabilities/214958
https://www.ibm.com/support/pages/node/6525554

Get alerted when CVE-2021-39065 or the next vulnerability affects your stack