Advisories · Technology

IBM DataStage on Cloud Pak for Data.

Every CVE that names IBM DataStage on Cloud Pak for Data among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81212 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data Improper Authorization
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-82101 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data Path Traversal
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-82103 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data Information Disclosure
- IBM DataStage on Cloud Pak for Data
- Information disclosure
Not analysed yet 12 Oct 2026
CVE-2026-82110 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data Path Traversal
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 12 Oct 2026
CVE-2026-82096 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data Command Injection
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 12 Oct 2026
CVE-2026-82108 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data Code Injection
- IBM DataStage on Cloud Pak for Data
- Code injection
Not analysed yet 12 Oct 2026
CVE-2026-84418 CVE record

CVSS 7.4 High

DataStage on Cloud Pak for Data Improper Certificate Validation
- IBM DataStage on Cloud Pak for Data
- Weak cryptography or TLS
Not analysed yet 12 Oct 2026
CVE-2026-84421 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 29 Sept 2026
CVE-2026-82094 CVE record

CVSS 7.1 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 24 Sept 2026
CVE-2026-82093 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Insecure deserialization
Not analysed yet 24 Sept 2026
CVE-2026-81552 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 24 Sept 2026
CVE-2026-81549 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Server-side request forgery (SSRF)
Not analysed yet 24 Sept 2026
CVE-2026-81548 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 24 Sept 2026
CVE-2026-81547 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 24 Sept 2026
CVE-2026-81545 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 24 Sept 2026
CVE-2026-81539 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 24 Sept 2026
CVE-2026-81537 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 23 Sept 2026
CVE-2026-81536 CVE record

CVSS 7.7 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- XML external entities (XXE)
Not analysed yet 23 Sept 2026
CVE-2026-81208 CVE record

CVSS 7.7 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Hard-coded credentials
Not analysed yet 23 Sept 2026
CVE-2026-80423 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Information disclosure
Not analysed yet 23 Sept 2026
CVE-2026-80425 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 23 Sept 2026
CVE-2026-80412 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 23 Sept 2026
CVE-2026-80379 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 23 Sept 2026
CVE-2026-17102 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 22 Sept 2026
CVE-2026-16672 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 22 Sept 2026
CVE-2026-16469 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 22 Sept 2026
CVE-2026-16468 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 22 Sept 2026
CVE-2026-16346 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-16335 CVE record

CVSS 8.1 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 14 Sept 2026
CVE-2026-16338 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 14 Sept 2026
CVE-2026-16432 CVE record

CVSS 7.7 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- XML external entities (XXE)
Not analysed yet 14 Sept 2026
CVE-2026-16428 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Code injection
Not analysed yet 14 Sept 2026
CVE-2026-16466 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 14 Sept 2026
CVE-2026-16673 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 14 Sept 2026
CVE-2026-80378 CVE record

CVSS 8.5 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-80380 CVE record

CVSS 7.1 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Cross-site request forgery (CSRF)
Not analysed yet 10 Sept 2026
CVE-2026-80434 CVE record

CVSS 7.4 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-80424 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-80436 CVE record

CVSS 8.5 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-81207 CVE record

CVSS 8.5 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Server-side request forgery (SSRF)
Not analysed yet 10 Sept 2026
CVE-2026-81210 CVE record

CVSS 7.7 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Broken access control
Not analysed yet 10 Sept 2026
CVE-2026-81540 CVE record

CVSS 8.5 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-81550 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-81551 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-81554 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-82092 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-82095 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-82097 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Server-side request forgery (SSRF)
Not analysed yet 10 Sept 2026
CVE-2026-82098 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-82099 CVE record

CVSS 8.8 High

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 10 Sept 2026
CVE-2026-82100 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Path traversal
Not analysed yet 10 Sept 2026
CVE-2026-82107 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Authentication bypass
Not analysed yet 10 Sept 2026
CVE-2025-13686 CVE record

CVSS 6.3 Medium

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 3 Mar 2026
CVE-2025-13687 CVE record

CVSS 6.3 Medium

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 3 Mar 2026
CVE-2025-13688 CVE record

CVSS 6.3 Medium

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- IBM DataStage on Cloud Pak for Data
- Command injection
Not analysed yet 3 Mar 2026
CVE-2025-13616 CVE record

CVSS 6.5 Medium

DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response
- IBM DataStage on Cloud Pak for Data
- Information disclosure
Not analysed yet 3 Mar 2026
CVE-2025-13691 CVE record

CVSS 8.1 High

DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing
- IBM DataStage on Cloud Pak for Data
- Information disclosure
Not analysed yet 17 Feb 2026
CVE-2022-38714 CVE record

CVSS 4.9 Medium

IBM DataStage on Cloud Pak for Data information disclosure
- IBM DataStage on Cloud Pak for Data
- Hard-coded credentials
Not analysed yet 12 Feb 2024