Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-13688

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the wrapped command component.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM DataStage on Cloud Pak for Data

  • 5.1.2 to ≤ 5.3.0affected

References