The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.223
EPSS Ranking 95.6%