CVE-2025-14753
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.
Published Sep 18, 2026 · updated Oct 14, 2026 · ibm cloud pak for data
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 18, 2026 · NIST NVD
Detected
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Oct 14, 2026 · NIST NVD
Updated
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected
- cpe ibm/cloud pak for data5.1.2
Sources
- CVE.orgVulnerability recordCVE-2025-14753
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-14753
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2025-14753
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
nvd.nist.gov