Vulnerability Details CVE-2026-16325
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts due to improper neutralization of input in the X-Forwarded-Host header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.6%
CVSS Severity
CVSS v3 Score 4.4
Products affected by CVE-2026-16325
-
cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0