Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:*:*:*:*:*:*:*

part: a version: 5.4.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDatastage On Cloud Pak For Data (2b24ead5-3b47-55f2-a65f-53501a817c96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16432 vulnerable 2026-09-16 04:32:57.044713 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HIGH (7.7)
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
Published: 2026-09-14T19:48:43.821Z
Updated: 2026-09-14T20:13:30.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16335 vulnerable 2026-09-16 04:32:56.967770 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HIGH (8.1)
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability.
Published: 2026-09-14T19:50:00.829Z
Updated: 2026-09-14T20:08:42.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16338 vulnerable 2026-09-16 04:32:56.873572 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CRITICAL (9.9)
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
Published: 2026-09-14T19:49:39.211Z
Updated: 2026-09-14T20:13:30.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16466 vulnerable 2026-09-16 04:32:56.748930 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HIGH (8.8)
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection.
Published: 2026-09-14T19:45:03.112Z
Updated: 2026-09-14T20:08:23.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16428 vulnerable 2026-09-16 04:32:56.365428 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HIGH (8.8)
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine.
Published: 2026-09-14T19:48:05.378Z
Updated: 2026-09-14T20:13:30.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16673 vulnerable 2026-09-16 04:32:56.352212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82092 vulnerable 2026-09-16 04:32:53.887816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82107 vulnerable 2026-09-16 04:32:53.877317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82097 vulnerable 2026-09-16 04:32:53.755196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82099 vulnerable 2026-09-16 04:32:53.745523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82095 vulnerable 2026-09-16 04:32:53.704716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82100 vulnerable 2026-09-16 04:32:53.689213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-82098 vulnerable 2026-09-16 04:32:53.615859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81207 vulnerable 2026-09-16 04:32:48.471318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81550 vulnerable 2026-09-16 04:32:48.221548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81554 vulnerable 2026-09-16 04:32:48.104150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81540 vulnerable 2026-09-16 04:32:48.077018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81210 vulnerable 2026-09-16 04:32:48.072658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81551 vulnerable 2026-09-16 04:32:47.976323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-80380 vulnerable 2026-09-16 04:32:40.169236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-80424 vulnerable 2026-09-16 04:32:40.142172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-80378 vulnerable 2026-09-16 04:32:40.106103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-80434 vulnerable 2026-09-16 04:32:40.095245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-80436 vulnerable 2026-09-16 04:32:39.996166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.