CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

Required action (CISA)

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-3993

Weakness behind it

CISA records this vulnerability as an instance of CWE-264. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3993
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog