Skip to content
OpenAdvisories
High · 7.7 CVE-2026-16432 EUVD-2026-77794GHSA-39mg-9c9r-37cc

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak for Data

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References