{"id":"CVE-2026-80435","kind":"vulnerability","aliases":["CVE-2026-80435"],"related":[],"title":"IBM DataStage on Cloud Pak for Data: XML injection leaks sensitive information","description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.","summary":"IBM DataStage 5.4.0.0 on Cloud Pak for Data has an XML external entity (XXE) injection flaw. A remote attacker who already has an account can read sensitive information through it.","severity":"medium","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cloud-pak-for-data","ibm-datastage","vendor"],"not_affected_if":["other-version"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:22+00:00","updated_at":"2026-11-08T19:23:22+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T19:23:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM DataStage on Cloud Pak for Data: XML injection leaks sensitive information","impact":"low","summary":"IBM DataStage 5.4.0.0 on Cloud Pak for Data has an XML external entity (XXE) injection flaw. A remote attacker who already has an account can read sensitive information through it.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-datastage","cloud-pak-for-data"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads sensitive information from the DataStage server","analyst_note":"Check the IBM security bulletin for CVE-2026-80435 for affected range, fixed version and any required setting; the NVD entry gives none.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-version"],"who_is_affected":"Organizations running IBM DataStage 5.4.0.0 on IBM Cloud Pak for Data are exposed. The sources do not say which configurations or features are needed to trigger the flaw. Teams not running that version can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00068,"input_tokens":4533,"output_tokens":453,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-80435':15A,18A '5.4.0.0':30B,63C 'account':51B 'allow':65C 'alreadi':48B 'attack':46B,69C 'authent':68C 'cloud':4A,20B,32B,59C 'cloud-pak-for-data':19B 'could':64C 'cve':13A,16A 'data':7A,23B,35B,62C 'datastag':2A,26B,29B,57C 'due':74C 'entiti':40B,79C 'extern':39B,78C 'flaw':43B,82C 'ibm':1A,25B,28B,56C 'ibm-datastag':24B 'inform':12A,55B,73C 'inject':9A,42B,81C 'leak':10A 'obtain':71C 'pak':5A,21B,33B,60C 'read':53B 'remot':45B,67C 'sensit':11A,54B,72C 'vendor':27B 'xml':8A,38B,77C 'xxe':41B,80C","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM DataStage 5.4.0.0 on IBM Cloud Pak for Data are exposed. The sources do not say which configurations or features are needed to trigger the flaw. Teams not running that version can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cloudpakfordata","ibmdatastage","medium","vendor"],"campaign_type":null,"search_a":"'-2026':14A,17A '-80435':15A,18A 'cloud':4A 'cve':13A,16A 'data':7A 'datastag':2A 'ibm':1A 'inform':12A 'inject':9A 'leak':10A 'pak':5A 'sensit':11A 'xml':8A","search_b":"'5.4.0.0':30B 'account':51B 'alreadi':48B 'attack':46B 'cloud':20B,32B 'cloud-pak-for-data':19B 'data':23B,35B 'datastag':26B,29B 'entiti':40B 'extern':39B 'flaw':43B 'ibm':25B,28B 'ibm-datastag':24B 'inform':55B 'inject':42B 'pak':21B,33B 'read':53B 'remot':45B 'sensit':54B 'vendor':27B 'xml':38B 'xxe':41B","search_c":"'5.4.0.0':63C 'allow':65C 'attack':69C 'authent':68C 'cloud':59C 'could':64C 'data':62C 'datastag':57C 'due':74C 'entiti':79C 'extern':78C 'flaw':82C 'ibm':56C 'inform':73C 'inject':81C 'obtain':71C 'pak':60C 'remot':67C 'sensit':72C 'xml':77C 'xxe':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-80435","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80435","severity":null,"published_at":"2026-11-08T19:17:40+00:00","modified_at":"2026-11-08T19:17:40+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}