CVSS 5.0 (medium) · published 2026-11-08
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
Affected products (NVD): ibm datastage_on_cloud_pak_for_data
Weakness: CWE-611
Source: NVD CVE-2026-80435
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.