Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.1.2:*:*:*:*:*:*:*

part: a version: 5.1.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatastage On Cloud Pak For Data (2b24ead5-3b47-55f2-a65f-53501a817c96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13691 vulnerable 2026-06-08 07:06:32.502764 DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing
HIGH (8.1)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used to impersonate other users in the system.
Published: 2026-02-17T20:17:24.149Z
Updated: 2026-02-26T14:44:19.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13688 vulnerable 2026-06-08 07:06:32.494393 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.
Published: 2026-03-03T20:44:40.905Z
Updated: 2026-03-03T21:30:47.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13687 vulnerable 2026-06-08 07:06:32.494056 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.
Published: 2026-03-03T20:45:55.395Z
Updated: 2026-03-03T21:31:25.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13686 vulnerable 2026-06-08 07:06:32.491955 DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
MEDIUM (6.3)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component.
Published: 2026-03-03T20:51:45.521Z
Updated: 2026-03-03T21:31:57.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13616 vulnerable 2026-06-08 07:04:32.697073 DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response
MEDIUM (6.5)
IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system.
Published: 2026-03-03T19:53:22.116Z
Updated: 2026-03-04T21:15:47.130Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.