Login Request a demo
Unscored severity · published Mar 26, 2014
CVE-2013-3997
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users…
–
CVSS
1%
EPSS
No
On KEV
Description
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Infosphere Biginsights · Ibm
1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +4 more · source: NVD
Affected product
IB
Infosphere Biginsights
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3997
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3997
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21667812
www.securityfocus.com
http://www.securityfocus.com/bid/66360
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84986
More from Infosphere Biginsights
6.5
CVE-2013-3993
IBM InfoSphere BigInsights Invalid Input Vulnerability
7.4
CVE-2015-1947
Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan…
7.3
CVE-2015-1836
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect…
7.3
CVE-2015-1772
The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products,…
6.5
CVE-2014-4782
IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service