Lucene search
+L

301 matches found

NVD
NVD
added 2026/02/17 9:22 p.m.18 views

CVE-2025-13691

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system...

8.1CVSS0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/17 8:17 p.m.43 views

CVE-2025-13691 DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system...

8.1CVSS0.0029EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 8:17 p.m.6 views

CVE-2025-13691 DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system...

8.1CVSS5.5AI score0.0029EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 8:17 p.m.11 views

CVE-2025-13691

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system...

8.1CVSS5.5AI score0.0029EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/02/17 8:17 p.m.49 views

CVE-2025-13691

CVE-2025-13691 affects IBM DataStage on Cloud Pak for Data versions 5.1.2–5.3.0. The issue arises from HTTP processing that returns sensitive information in responses, which could be used to impersonate other users. IBM’s bulletin cites CVSS v3.1 base score 8.1 (high) with impact on confidentiali...

8.1CVSS5.5AI score0.0029EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/02/17 12:00 a.m.16 views

IBM DataStage on Cloud Pak for Data 安全漏洞

IBM DataStage on Cloud Pak for Data is an enterprise-level data integration solution provided by International Business Machines IBM. Versions 5.1.2 to 5.3.0 of IBM DataStage on Cloud Pak for Data contain security vulnerabilities. These vulnerabilities stem from the return of sensitive informatio...

8.1CVSS5.8AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/17 12:00 a.m.15 views

PT-2026-20226

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data versions 5.1.2 through 5.3.0 Description IBM DataStage on Cloud Pak for Data returns sensitive information in an HTTP response. This information could potentially be used to impersonate other users within th...

8.1CVSS5.4AI score0.0029EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/17 12:00 a.m.24 views

IBM DataStage on Cloud Pak for Data 代码问题漏洞

IBM DataStage on Cloud Pak for Data is an enterprise-level data integration solution provided by IBM Corporation. There is a code vulnerability in IBM DataStage on Cloud Pak for Data, which stems from unlimited file uploads. This vulnerability could allow authenticated users to execute arbitrary...

8.8CVSS6.1AI score0.00542EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/06 2:41 p.m.8 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing (CVE-2025-13691)

Summary HTTP processing is used by DataStage on Cloud Pak for Data as part of the overall request processing. Vulnerability Details CVEID:CVE-2025-13691 DESCRIPTION: IBM DataStage on Cloud Pak for Data returns sensitive information in an HTTP response that could be used to impersonate other users...

8.1CVSS5.4AI score0.0029EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:15 a.m.16 views

CVE-2022-38714

IBM DataStage on Cloud Pak for Data 4.0.6 to 4.5.2 stores sensitive credential information that can be read by a privileged user. IBM X-Force ID: 235060...

4.9CVSS5.8AI score0.00589EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/08 11:02 p.m.8 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to request smuggling due to the Netty package (CVE-2025-58056)

Summary Netty is used by DataStage on Cloud Pak for Data as part of the event processing functionality. Vulnerability Details CVEID:CVE-2025-58056 DESCRIPTION: Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and...

7.5CVSS6.6AI score0.00677EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/14 3:50 p.m.8 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to denial of service due to the netty package (CVE-2025-58057)

Summary Netty is used by DataStage on Cloud Pak for Data as part of the request processing functionality. Vulnerability Details CVEID:CVE-2025-58057 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol...

7.5CVSS6.5AI score0.00601EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 6:27 p.m.11 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a deny of service attack due to the Netty package (CVE-2025-55163)

Summary Netty is used by DataStage on Cloud Pak for Data as part of the API processing functionality. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable ...

8.2CVSS6.7AI score0.01049EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/29 6:25 p.m.7 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to uncontrolled recursion due to the Apache Commons Lang package (CVE-2025-48924)

Summary Apache Commons Lang is used by DataStage on Cloud Pak for Data as part of API processing functionality. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

5.3CVSS6.7AI score0.0227EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2015-2005

Malware in sbrugna...

7.2CVSS6.4AI score0.0036EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2012-4743

Malware in sbrugna...

6.5CVSS6.5AI score0.01395EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2016-9825

Malware in sbrugna...

6.1CVSS6.3AI score0.01146EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2012-0733

Malware in sbrugna...

6.5CVSS6.4AI score0.01066EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.19 views

EUVD-2023-27572

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00336EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-41283

Malicious code in bioql PyPI...

4.9CVSS5.4AI score0.00589EPSS
SaveExploits0References2
Rows per page
Query Builder