6 matches found
EUVD-2026-75775
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...
CVE-2026-81540 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...
CVE-2026-81540 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...
CVE-2026-81540: Improper Limitation of a Pathname to a Restricted Directory
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vulnerability...
PT-2026-89632
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to overwrite ruleset files belonging to other tenants. Path traversal is a flaw that allows an attacker to access or...
PT-2019-18724
Name of the Vulnerable Software and Affected Versions PMD versions 5.8.1 and earlier Description The issue allows attackers to tamper with XML external entities in ruleset files, potentially leading to information disclosure, denial of service, or request forgery attacks. This can be achieved...