CVE-2013-3993

high-risk
Published 2014-07-07

IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.

Do I need to act?

!
21.0% chance of exploitation in next 30 days
EPSS score — higher than 79% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.5/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Infosphere Biginsights

Affected Vendors

Ibm

References (9)

Broken Link http://secunia.com/advisories/59676
Broken Link http://www-01.ibm.com/support/docview.wss?uid=swg21677445
Broken Link http://www.securityfocus.com/bid/68449
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
Broken Link http://secunia.com/advisories/59676
Broken Link http://www-01.ibm.com/support/docview.wss?uid=swg21677445
Broken Link http://www.securityfocus.com/bid/68449
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/84982
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-...
50
/ 100
high-risk
Severity 24/34 · High
Exploitability 21/34 · High
Exposure 5/34 · Minimal