Server-Side Request Forgery Vulnerability in IBM DataStage on Cloud Pak for Data
CVE-2026-107330

7.7HIGH

Key Information:

Vendor

IBM
Status
Datastage On Cloud Pak For Data
Vendor
CVE Published:
8 November 2026

What is CVE-2026-107330?

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability, which can potentially allow remote authenticated attackers to gain access to sensitive information. This type of vulnerability can enable attackers to send unauthorized requests from the server to internal resources, leading to compromised data security. It is crucial for users of this product to apply security patches and review their configurations to mitigate the risks associated with this vulnerability.

Affected Version(s)

DataStage on Cloud Pak for Data 5.4.0.0

References

https://www.ibm.com/support/pages/node/7294270
vendor-advisorypatch

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.