CVE-2026-16432

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software PUBLISHED

Description (CNA)

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

Affected (CNA)

Vendor / product	Versions
IBM / DataStage on Cloud Pak for Data	affected 5.4.0.0

CWE

CWE-611

References

https://www.ibm.com/support/pages/node/7286562

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.