CVE-2025-13686 in DataStage on Cloud Pak for Data

Résumé

par MITRE • 03/03/2026

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input through the job subroutine component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Ibm
• Réserver: 25/11/2025
• Divulgation: 03/03/2026
• Modérer: accepté
• Entrée: VDB-348619
• CPE: prêt
• CWE: CWE-78 (confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.00054
• KEV: non
• Activités: très faible
• Secteur: Transportation, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-13686
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-13686
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-13686/