ACTIVELY EXPLOITED
CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability
| Vendor | IBM |
|---|---|
| Product | InfoSphere BigInsights |
| Actively exploited | Yes |
| Added to CISA KEV | 25 May 2022 |
| CISA federal deadline | 15 Jun 2022 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-264 |
Required action (CISA's text)
The impacted product is end-of-life and should be disconnected if still in use.
Description (NVD)
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
SOURCES
Other IBM flaws
- CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability
- CVE-2026-9198: IBM Langflow Code Injection Vulnerability
- CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability
- CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
- CVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.