Skip to content
OpenAdvisories

Product · IBM

Cloud Pak for Data

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-14754

    IBM Cloud Pak for Data is vulnerable to OS command injection

    IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

    IBM Cloud Pak for Data
  • High 7.5
    CVE-2025-14753

    IBM Cloud Pak for Data is vulnerable to path traversal

    IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

    IBM Cloud Pak for Data
  • High 7.2
    CVE-2022-36769

    IBM Cloud Pak for Data file upload

    IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 232034.

    IBM Cloud Pak for Data