CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: yes — in CISA KEV since 2022-05-25
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-07 · updated 2026-06-16
Weakness: CWE-22

Description

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

Affected products

IBM BigInsights: before 2.1.0.3 — fixed in 2.1.0.3

How to fix

Upgrade to a fixed version: IBM BigInsights 2.1.0.3. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/59676
http://www-01.ibm.com/support/docview.wss?uid=swg21677445
http://www.securityfocus.com/bid/68449
https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
http://secunia.com/advisories/59676
http://www-01.ibm.com/support/docview.wss?uid=swg21677445
http://www.securityfocus.com/bid/68449
https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993

Get alerted when CVE-2013-3993 or the next vulnerability affects your stack