Search Results (51 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-81548 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81537 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.
CVE-2026-80412 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.
CVE-2026-16672 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-81549 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 9.6 Critical
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.
CVE-2026-82094 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-26 7.1 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory.
CVE-2026-16468 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.
CVE-2026-16469 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-17102 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81539 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-81547 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.
CVE-2026-81552 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables.
CVE-2026-82093 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-25 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.
CVE-2026-80423 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.
CVE-2026-81545 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-80425 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-80379 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 8.8 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81536 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 7.7 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
CVE-2026-81208 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-24 7.7 High
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
CVE-2026-16346 1 Ibm 1 Datastage On Cloud Pak For Data 2026-09-23 9.9 Critical
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.