CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property...

CVE-2026-16428

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine...

CVE-2026-16338

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths...

CVE-2026-16432

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

CVE-2026-16335

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to read, write, or delete arbitrary files. The CVSS v3.1 score is 8.1 (HIGH) , with low attack complexity, low privileges required, and no scope change; impact ...

CVE-2026-16335 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability...

EUVD-2026-77798

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability...

CVE-2026-16338

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an arbitrary file write vulnerability (CVE-2026-16338) caused by improper validation of file paths (CWE-73: External Control of File Name or Path). A remote authenticated attacker can exploit this to write files to arbitrary locations, wi...

EUVD-2026-77797

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths...

CVE-2026-16338 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths...

CVE-2026-16432

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to XML External Entity (XXE) injection in the PxXMLInput operator (CWE-611). A remote authenticated attacker can exploit this flaw to obtain sensitive information, with the scope of impact extending beyond the vulnerable component (CVSS 3....

CVE-2026-16432 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

EUVD-2026-77794

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

EUVD-2026-77793

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine...

CVE-2026-16428 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine...

CVE-2026-16428

IBM DataStage on Cloud Pak for Data (version 5.4.0.0 ) is vulnerable to arbitrary code execution due to improper configuration of the XSLT transformation engine , classified as CWE-94 (Code Injection). A remote authenticated attacker can exploit this over the network with low complexity and no us...

CVE-2026-16466

CVE-2026-16466 affects IBM DataStage on Cloud Pak for Data version 5.4.0.0 , where an OS command injection flaw (CWE-78) allows a remote authenticated attacker to execute arbitrary commands with a CVSS score of 8.8 (HIGH) , impacting confidentiality, integrity, and availability. The vulnerability...

EUVD-2026-77790

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

CVE-2026-16466 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability where improper neutralization of special characters in the PxPeek name property allows a remote authenticated attacker to execute arbitrary OS commands . The CVSS 3.1 score is 8.8 (High) with a network vector, low complexity, an...