CVE-2013-3993 is a critical path traversal vulnerability affecting IBM InfoSphere BigInsights versions prior to 2.1.0.3, allowing remote authenticated users to bypass file and directory restrictions or access untrusted data via crafted API calls. With a CVSS score of 6.5 (Medium) and a FAUCET Risk Score of 99/100, this vulnerability presents a high risk due to its network-based attack vector and low attack complexity, potentially leading to unauthorized data disclosure. This CVE is actively exploited, listed in the KEV catalog for known ransomware campaign use, and has garnered significant community attention with 11 mentions, despite no public exploit code being readily available in Metasploit, Nuclei, or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.1.0.3CPE matchmatch criteria | cpe:2.3:a:ibm:infosphere_biginsights:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.