VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2026· Updated Mar 3, 2026

DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment

CVE-2025-13687

Description

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the user-defined function component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/DataStage on Cloud Pak for Datacpe-rescue2 versions
    cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.1.2:*:*:*:*:*:*:*range: 5.1.2
    • (no CPE)range: >=5.1.2 <=5.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.