Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatastage On Cloud Pak For Data (2b24ead5-3b47-55f2-a65f-53501a817c96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13691 vulnerable 2026-06-08 07:06:32.502920 DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing
HIGH (8.1)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system.
Published: 2026-02-17T20:17:24.149Z
Updated: 2026-02-26T14:44:19.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13689 vulnerable 2026-06-08 07:06:32.497679 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
HIGH (8.8)
IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.
Published: 2026-02-17T22:26:20.866Z
Updated: 2026-02-26T14:44:18.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13688 vulnerable 2026-06-08 07:06:32.494646 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.
Published: 2026-03-03T20:44:40.905Z
Updated: 2026-03-03T21:30:47.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13687 vulnerable 2026-06-08 07:06:32.494123 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.
Published: 2026-03-03T20:45:55.395Z
Updated: 2026-03-03T21:31:25.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13686 vulnerable 2026-06-08 07:06:32.493631 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component.
Published: 2026-03-03T20:51:45.521Z
Updated: 2026-03-03T21:31:57.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13616 vulnerable 2026-06-08 07:04:32.699023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38714 vulnerable 2026-06-08 05:47:16.929256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.