PT-2026-22818 · Ibm · Datastage On Cloud Pak For Data

CVE-2025-13688 · Publicado 2026-03-03 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data versions 5.1.2 through 5.3.0

Description An authenticated user may be able to execute arbitrary commands with normal user privileges on the system. This is due to improper validation of user-supplied input through the wrapped command component.

Recommendations Versions prior to 5.1.2 and after 5.3.0 should not be affected.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-13688

Produtos afetados

Datastage On Cloud Pak For Data

Referências · 5

• https://ibm.com/support/pages/node/7262347 · Correção, Aviso do Fabricante
• https://twitter.com/CVEnew/status/2028937781255245972 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-13688 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-13688 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2028938769760432388 · Publicação no Twitter