CVE-2013-3993
medium · 6.5Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
The impacted product is end-of-life and should be disconnected if still in use.
Added 2022-05-25Remediation due 2022-06-15
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
6.5
CVSS
5.2%
EPSS (exploit prob.)
92nd
EPSS percentile
2014-07-07
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | infosphere_biginsights | < 2.1.0.3 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/59676
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445
- http://www.securityfocus.com/bid/68449
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
- http://secunia.com/advisories/59676
- http://www-01.ibm.com/support/docview.wss?uid=swg21677445
- http://www.securityfocus.com/bid/68449
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-3993