CVE-2013-3993
Medium 6.5 Exploited in the wild (KEV) Used in ransomware campaigns
Confirmed active exploitation — CISA KEV catalog
- Name
- IBM InfoSphere BigInsights Invalid Input Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
Description
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Metrics
- CVSS 3.1
-
6.5 (MEDIUM)
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 5% (percentile: 92) as of 1 November 2026
- CWE
- CWE-22
Affected products
ibm: infosphere biginsights
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445 Vendor Advisory
- http://secunia.com/advisories/59676 Broken Link
- http://www.securityfocus.com/bid/68449 Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 Third Party AdvisoryVDB Entry
- http://secunia.com/advisories/59676 Broken Link
- http://www.securityfocus.com/bid/68449 Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013… US Government Resource