Skip to content
OpenAdvisories
Medium · 5.0 CVE-2026-80435 EUVD-2026-119726GHSA-v39v-7h8g-m63v

DataStage on Cloud Pak for Data has several vulnerabilities

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References