VULNERABILITY INTELLIGENCE
CVE-2013-3993
CVSS score6.5 MEDIUM
EPSS probability4.77%
CISA KEVKnown exploited vulnerability
Published2014-07-07
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Known Exploited Vulnerability
IBM InfoSphere BigInsights Invalid Input Vulnerability
Vendor / product: IBM / InfoSphere BigInsights
Description
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Primary references
- psirt@us.ibm.com — Broken Link
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource