Vulnerabilidades do Ibm Datastage On Cloud Pak For Data
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Datastage On Cloud Pak For Data: 57 registro(s), com versões afetadas e correções.cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data
CVE-2026-84418
Alta · 7.4
CWE-295 12/10/2026
DataStage on Cloud Pak for Data Improper Certificate Validation
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.
CVE-2026-82110
Crítica · 9.9
CWE-22 12/10/2026
Vulnerabilidade de Path Traversal no IBM DataStage do Cloud Pak for Data (CWE-22)
IBM DataStage no Cloud Pak for Data 5.4.0.0 pode permitir que um atacante remoto autenticado execute código arbitrário devido à validação inadequada de caminho (pathname) durante uma travessia de diretório (path traversal).
CVE-2026-82108
Alta · 8.8
CWE-94 12/10/2026
DataStage on Cloud Pak for Data Code Injection
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-82103
Média · 6.5
CWE-200 12/10/2026
Exposição de Informações Sensíveis no IBM DataStage on Cloud Pak for Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor.
CVE-2026-82101
Crítica · 9.6
CWE-22 12/10/2026
IBM DataStage no Cloud Pak for Data: negação de serviço por path traversal
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVE-2026-82096
Alta · 8.8
CWE-78 12/10/2026
DataStage on Cloud Pak for Data Command Injection
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-84421
Alta · 8.8
CWE-22 29/09/2026
Path Traversal em Ibm Datastage On Cloud Pak For Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction.
CVE-2026-82094
Alta · 7.1
CWE-22 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory.
CVE-2026-82093
Alta · 8.8
CWE-502 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.
CVE-2026-81552
Alta · 8.8
CWE-78 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables.
CVE-2026-81549
Alta · 7.7
CWE-918 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.
CVE-2026-81548
Alta · 8.8
CWE-78 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81547
Alta · 8.8
CWE-22 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.
CVE-2026-81545
Alta · 8.8
CWE-78 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81539
Alta · 8.8
CWE-78 24/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-81537
Alta · 8.8
CWE-78 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.
CVE-2026-81536
Alta · 7.7
CWE-611 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
CVE-2026-81208
Alta · 7.7
CWE-522 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
CVE-2026-80423
Média · 6.5
CWE-200 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.
CVE-2026-80425
Alta · 8.8
CWE-78 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-80412
Alta · 8.8
CWE-78 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.
CVE-2026-80379
Alta · 8.8
CWE-78 23/09/2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-17102
Alta · 8.8
CWE-78 22/09/2026
OS Command Injection em Ibm Datastage On Cloud Pak For Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16672
Alta · 8.8
CWE-78 22/09/2026
OS Command Injection em Ibm Datastage On Cloud Pak For Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-16469
Alta · 8.8
CWE-78 22/09/2026
OS Command Injection em Ibm Datastage On Cloud Pak For Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.