CVEvulnerability
CVE-2013-3993
CISA Known Exploited Vulnerability
IBM InfoSphere BigInsights Invalid Input Vulnerability — IBM InfoSphere BigInsights
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
- Added to KEV
- 2022-05-25
- Remediation due
- 2022-06-15
- Ransomware use
- Known
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2013-3993
- Status
- Analyzed
- Published
- 2014-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Affected configurations
• ibm infosphere biginsights (< 2.1.0.3)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/59676 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445 Vendor Advisory
- http://www.securityfocus.com/bid/68449 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/59676 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445 Vendor Advisory
- http://www.securityfocus.com/bid/68449 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993 US Government Resource