CVE-2025-14754

HighCVSS 8.8

Published: 18/09/2026(UTC)Updated: 14/10/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

37th percentile - higher than 37% of all known CVEs

Summary

IBM Cloud Pak for Data 5.1.2 contains improper validation of user-supplied input. An authenticated user could execute arbitrary commands with elevated privileges on the system.

Risk Assessment

An authenticated user could gain elevated privileges and execute arbitrary commands, potentially leading to full system compromise.

Recommendation

Update IBM Cloud Pak for Data to the patched version and review user privileges on the system.

Other vulnerabilities in IBM Cloud Pak for Data

CVE-2025-14753High
IBM Cloud Pak for Data 5.1.2 allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Original NVD description (English source)

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS