CVE-2025-14754

Published: Set 18, 2026 Last Modified: Set 22, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

Description

AI Translation Available

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Stable

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Confidentiality Integrity Availability Non-Repudiation

Potential Impacts:

Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Read Files Or Directories Modify Files Or Directories Read Application Data Modify Application Data Hide Activities

Applicable Platforms

Technologies: Not Technology-Specific, AI/ML, Web Server

Likelihood of Exploit: High

View CWE Details

Application

Cloud Pak For Data by Ibm

Product Information

Vendor Ibm

Product Cloud Pak For Data

Version 5.1.2

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:ibm:cloud_pak_for_data:5.1.2:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://www.ibm.com/support/pages/node/7287142