Unscored severity · published Aug 6, 2013
CVE-2013-3995
Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Infosphere Biginsights · Ibm
1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3995
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3995
secunia.com
http://secunia.com/advisories/54447
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21645804
www.securityfocus.com
http://www.securityfocus.com/bid/61604
www.securitytracker.com
http://www.securitytracker.com/id/1028883
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84984
More from Infosphere Biginsights
6.5
CVE-2013-3993
IBM InfoSphere BigInsights Invalid Input Vulnerability
7.4
CVE-2015-1947
Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan…
7.3
CVE-2015-1836
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect…
7.3
CVE-2015-1772
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products,…
6.5
CVE-2014-4782
IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service