IBM DataStage on Cloud Pak for Data 5.4.0.0
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
- Severity
- CriticalCVSS 3.1 · 9.6
- Fix
- Not confirmedLast checked today
- Affected versions
- 5.4.0
- Weakness
- CWE-22Path Traversal
- Exploit likelihood
- 0.40% in 30 daysEPSS, higher than 34% of known flaws
- Affects
- DataStage on Cloud Pak for Data
- Exploited
- Not confirmedNo confirmation recorded
- CISA SSVC
- No known exploitationAutomatable: no · Technical impact: partial
- EU ID
- EUVD-2026-75764ENISA vulnerability database
Severity breakdown
- Attack vector Network Requires network access to the vulnerable service
- Attack complexity Low Low complexity under the assessed conditions
- Privileges required Low Attacker needs a basic user account
- User interaction None No victim action needed
- Scope Changed Impact crosses a security authority boundary
- Confidentiality impact None No data disclosure
- Integrity impact High Protected data can be changed with serious impact
- Availability impact High The service can stop or suffer serious disruption
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H Open in FIRST.org calculator