Skip to content
OpenAdvisories
High · 8.8 CVE-2026-16428 EUVD-2026-77793GHSA-2389-phrx-hh6g

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak for Data

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References