← Database

CVE-2026-16325

MEDIUM CVSS: 4.4 Published: 2026-11-08 Modified: 2026-11-08

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of input in the X-Forwarded-Host header.

Affected Platforms

Unknown

Weakness Type

CWE-79

References