PT-2026-22817 · Ibm · Cloud Pak For Data+1
CVE-2025-13687
·
Published
2026-03-03
·
Updated
2026-03-03
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM DataStage on Cloud Pak for Data versions 5.1.2 through 5.3.0
Description
An authenticated user may be able to execute arbitrary commands with normal user privileges on the system. This is due to improper validation of user-supplied input through the user-defined function component.
Recommendations
Update IBM DataStage on Cloud Pak for Data to a version later than 5.3.0.
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cloud Pak For Data
Ibm Datastage