CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to an information disclosure vulnerability (CVE-2026-82103 ). A remote authenticated attacker could obtain sensitive information due to the exposure of data to an unauthorized actor. This issue is classified under CWE-200 and has a...

CVE-2026-82110

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a path traversal flaw due to improper validation of pathname. This vulnerability could allow a remote authenticated attacker to execute arbitrary code . The impact is categorized as CRITICAL with high integrity and availability impacts....

CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82096

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a command injection flaw (CWE-78) caused by the improper neutralization of special elements used in an OS command. This vulnerability could allow a remote authenticated attacker to execute arbitrary commands on the system. The CVSS 3.1 ...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82108 DataStage on Cloud Pak for Data Code Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82108

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a code injection vulnerability (CWE-94). A remote authenticated attacker can execute arbitrary code because the software fails to properly neutralize special elements used in OS commands . This vulnerability carries a High base severity...

CVE-2026-84418 DataStage on Cloud Pak for Data Improper Certificate Validation

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2026-84418

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a man-in-the-middle attack due to improper certificate validation (CWE-295). An attacker can present a forged TLS certificate to intercept the connection and capture the IAM bearer Authorization header automatically attached by the sess...

CVE-2026-82101: Improper Limitation of a Pathname to a Restricted Directory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

PT-2026-111100

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

PT-2026-111101

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to cause a denial of service. Path traversal is a flaw that allows an attacker to access files and directories that a...

CVE-2026-82103: Exposure of Sensitive Information to an Unauthorized Actor

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor...

CVE-2026-82108: Improper Control of Generation of Code

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82110: Improper Limitation of a Pathname to a Restricted Directory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal...

PT-2026-111102

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can obtain sensitive information due to an exposure of sensitive data to an unauthorized actor. Recommendations At the moment, there is no...

CVE-2026-82096: Improper Neutralization of Special Elements used in an OS Command

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84418: Improper Certificate Validation

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...