IB
Product
InfoSphere BigInsights
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add InfoSphere BigInsights to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3993 RansomwareIn wildKEV | 6.5 | Jul 7 | IBM InfoSphere BigInsights Invalid Input Vulnerability Affected: before 2.1.0.3 |
| CVE-2015-1947 | 7.4 | Dec 31 | Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 4.0.0.0 |
| CVE-2015-1836 | 7.3 | Dec 21 | Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2 |
| CVE-2015-1772 | 7.3 | Dec 21 | The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products,… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2 |
| CVE-2014-4782 | 6.5 | Apr 20 | IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service Affected: 2.1.2 |
| CVE-2017-1554 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim Affected: 4.2.0; 4.2.5 |
| CVE-2017-1553 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting Affected: 4.2.0; 4.2.5 |
| CVE-2017-1552 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection Affected: 4.2.0; 4.2.5 |
| CVE-2017-1336 | 4.4 | Dec 7 | IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files Affected: 4.2.0 |
| CVE-2015-5020 | 4.3 | Jan 2 | The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 4.0.0.0 |
| CVE-2015-1889 | – | Apr 22 | The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2 |
| CVE-2014-4781 | – | Feb 13 | The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote attackers to obtain sensitive Alert management-services API information via a… Affected: 2.1.2.0; 3.0.0.0; 3.0.0.1 |
| CVE-2014-0905 | – | Aug 17 | IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for remote attackers to capture this… Affected: 2.0.0.0; 2.1.0.0; 2.1.1.0; 2.1.2.0 |
| CVE-2013-3998 | – | Mar 26 | CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject… Affected: 1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +4 more |
| CVE-2013-3997 | – | Mar 26 | Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users… Affected: 1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +4 more |
| CVE-2013-3996 | – | Aug 6 | IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted… Affected: 1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +3 more |
| CVE-2013-3995 | – | Aug 6 | Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… Affected: 1.1.0.0; 1.1.0.1; 1.1.0.2; 1.2.0.0; 1.3.0.0; 1.3.0.1; +3 more |
| CVE-2013-3992 | – | Aug 6 | Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims… Affected: 2.0.0.0; 2.1.0.0 |
Showing 18