CVEブラウザに戻る

CVE-2013-3993

Known Exploited (CISA KEV)MEDIUM

6.5

CVSS Severity Score

EPSS Score49.9760%

EPSS Percentile92.77th

Published2014年7月7日

Last Modified2026年4月21日

Vulnerability Description

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

Affected Platforms (CPE)

📦

Ibm

Infosphere Biginsights

< 2.1.0.3

References & Advisories

🔗 http://secunia.com/advisories/59676

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21677445

🔗 http://www.securityfocus.com/bid/68449

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/84982

🔗 http://secunia.com/advisories/59676

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21677445

🔗 http://www.securityfocus.com/bid/68449

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/84982

関連する脆弱性情報

CVE-2015-19477.4

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, all...

CVE-2015-18367.3

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1...

CVE-2015-17727.3

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3...

CVE-2014-47826.5

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the ...