CVE-2013-3993
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended...
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Exploit likelihood
What each source reports
CVE List
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
- Record
CVE-2013-3993- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2013-3925
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
- Record
EUVD-2013-3925- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2qh2-hj3f-rhcf
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended...
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
- Record
GHSA-2qh2-hj3f-rhcf- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CISA KEV No score
IBM InfoSphere BigInsights Invalid Input Vulnerability
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
- Record
CVE-2013-3993- Weakness
- CWE-264
- Updated
- 2026-11-02
NVD
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
- Record
CVE-2013-3993- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-3993 is a low vulnerability (CVSS 3.5) in Ibm Infosphere Biginsights, published July 7, 2014. CISA lists it as known to be exploited, since May 25, 2022. EUVD reports exploitation since May 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.77%, the 91st percentile. No source names a fixed version.
References
secunia.com/advisories/59676
securityfocus.com/bid/68449
exchange.xforce.ibmcloud.com/vulnerabilities/84982
www-01.ibm.com/support/docview.wss?uid=swg21677445
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3993
nvd.nist.gov/vuln/detail/CVE-2013-3993
github.com/advisories/GHSA-2qh2-hj3f-rhcf