PT-2026-20225 · Ibm · Datastage On Cloud Pak For Data

CVE-2025-13689 · Publicado 2026-02-17 · Atualizado 2026-02-18

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data (affected versions not specified)

Description An authenticated user may be able to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2025-13689

Produtos afetados

Datastage On Cloud Pak For Data

Referências · 7

• https://twitter.com/CVEnew/status/2023901964648567096 · Publicação no Twitter
• https://ibm.com/support/pages/node/7259958 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-13689 · Aviso do Fabricante
• https://t.me/CVEtracker/44924 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-13689 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2023958522971529637 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2023900178177216857 · Publicação no Twitter