Back to CVE Browser

CVE-2013-3993

Known Exploited (CISA KEV)MEDIUM

6.5

CVSS Severity Score

EPSS Score49.9760%

EPSS Percentile92.77th

PublishedJul 7, 2014

Last ModifiedApr 21, 2026

Vulnerability Description

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

Affected Platforms (CPE)

📦

Ibm

Infosphere Biginsights

< 2.1.0.3

References & Advisories

🔗 http://secunia.com/advisories/59676

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21677445

🔗 http://www.securityfocus.com/bid/68449

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/84982

🔗 http://secunia.com/advisories/59676

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21677445

🔗 http://www.securityfocus.com/bid/68449

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/84982

Related Vulnerabilities

CVE-2015-19477.4

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, all...

CVE-2015-18367.3

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1...

CVE-2015-17727.3

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3...

CVE-2014-47826.5

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the ...