Lucene search
+L

229 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/03 8:51 p.m.3 views

CVE-2025-13686

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/03 8:51 p.m.23 views

CVE-2025-13686 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component...

6.3CVSS0.00344EPSS
Exploits0References1
CVE
CVE
added 2026/03/03 8:51 p.m.40 views

CVE-2025-13686

CVE-2025-13686 affects IBM DataStage on Cloud Pak for Data (versions 5.1.2–5.3.0). The root cause is improper validation of user-supplied input in the job subroutine component, enabling an authenticated user to execute arbitrary commands with normal user privileges (OS command injection). IBM’s b...

8.8CVSS6.2AI score0.00344EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2026/03/03 8:45 p.m.24 views

CVE-2025-13687

CVE-2025-13687 affects IBM DataStage on Cloud Pak for Data 5.1.2–5.3.0. An authenticated user could execute arbitrary commands with normal user privileges due to improper validation of input in the user-defined function component (OS command injection). Affected version range: 5.1.2–5.3.0. IBM's ...

8.8CVSS6.2AI score0.00344EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/03/03 8:44 p.m.5 views

EUVD-2025-208261

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/03 8:44 p.m.3 views

CVE-2025-13688 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/03 8:44 p.m.2 views

CVE-2025-13688

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/03/03 8:16 p.m.4 views

CVE-2025-13616

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

7.5CVSS5.8AI score0.00226EPSS
Exploits0References1
NVD
NVD
added 2026/03/03 8:16 p.m.16 views

CVE-2025-13616

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

7.5CVSS0.00226EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/03 7:53 p.m.8 views

CVE-2025-13616 DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

6.5CVSS5.9AI score0.00226EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/03 7:53 p.m.4 views

CVE-2025-13616

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

6.5CVSS5.9AI score0.00226EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/03/03 7:53 p.m.14 views

CVE-2025-13616

Vulnerability: IBM DataStage on Cloud Pak for Data (DataStage on Cloud Pak for Data) versions 5.1.2–5.3.0 expose sensitive information in an HTTP response, enabling information disclosure. Root cause: HTTP response leakage of sensitive system information. Impact: confidentiality impact H with no ...

7.5CVSS5.9AI score0.00226EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/03/03 7:53 p.m.6 views

EUVD-2025-208250

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

6.5CVSS5.9AI score0.00226EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.21 views

IBM DataStage on Cloud Pak for Data 操作系统命令注入漏洞

IBM DataStage on Cloud Pak for Data is an enterprise-level data integration solution provided by IBM Corporation. Versions 5.1.2 to 5.3.0 of IBM DataStage on Cloud Pak for Data contain an operating system command injection vulnerability. This vulnerability stems from improper input validation in...

8.8CVSS6.1AI score0.00344EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.8 views

PT-2026-22795

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

6.5CVSS5.9AI score0.00226EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.8 views

IBM DataStage on Cloud Pak for Data 安全漏洞

IBM DataStage on Cloud Pak for Data is an enterprise-level data integration solution provided by International Business Machines IBM. Versions 5.1.2 to 5.3.0 of IBM DataStage on Cloud Pak for Data contain security vulnerabilities. These vulnerabilities stem from the return of sensitive informatio...

7.5CVSS5.8AI score0.00226EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.9 views

PT-2026-22816

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.12 views

PT-2026-22817

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component...

6.3CVSS6.2AI score0.00344EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.7 views

IBM DataStage on Cloud Pak for Data 操作系统命令注入漏洞

IBM DataStage on Cloud Pak for Data is an enterprise-level data integration solution provided by IBM Corporation. Versions 5.1.2 to 5.3.0 of IBM DataStage on Cloud Pak for Data contain an operating system command injection vulnerability. This vulnerability stems from improper input validation in...

8.8CVSS6.1AI score0.00344EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/25 4:33 p.m.7 views

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response (CVE-2025-13616)

Summary DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response Vulnerability Details CVEID:CVE-2025-13616 DESCRIPTION: IBM DataStage on Cloud Pak for Data returns sensitive information in an HTTP response that could be used in further attacks against the...

7.5CVSS5.4AI score0.00226EPSS
Exploits0Affected Software1
Rows per page
Query Builder