PT-2026-91425
CVE-2026-16432
·
تاريخ النشر
2026-09-14
·
تاريخ التحديث
2026-10-06
الوصف من
CVSS 3.1
7.7
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM DataStage on Cloud Pak for Data version 5.4.0.0
Description
The PxXMLInput operator is susceptible to XML external entity (XXE) injection. This flaw allows a remote authenticated attacker to obtain sensitive information. XXE injection occurs when an XML parser improperly handles external entity references within an XML document, potentially allowing the disclosure of internal files or server data.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾