CVE-2013-3993
IBM InfoSphere BigInsights Invalid Input Vulnerability
Published Jul 7, 2014 · updated Jun 16, 2026 · ibm infosphere biginsights
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Timeline
Detection, updates, and resolution for this record.
Jul 7, 2014 · Catalog
Detected
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
May 25, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Jun 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Jun 15, 2022
Affected
- cpe ibm/infosphere biginsightsversion unspecified
- vendor IBM InfoSphere BigInsightsversion unspecified
Sources
- CISA KEVCVE-2013-3993
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
cisa.gov - CVE.orgCVE-2013-3993
Official CVE identifier
cve.org - FIRST EPSSCVE-2013-3993
30-day exploitation probability 4.8%
first.org - NIST NVDCVE-2013-3993
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
nvd.nist.gov