IB
Product
InfoSphere BigInsights
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
7.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add InfoSphere BigInsights to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3993 RansomwareIn wildKEV | 6.5 | Jul 7 | IBM InfoSphere BigInsights Invalid Input Vulnerability Affected: before 2.1.0.3 |
| CVE-2014-4782 | 6.5 | Apr 20 | IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service Affected: 2.1.2 |
| CVE-2017-1554 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim Affected: 4.2.0; 4.2.5 |
| CVE-2017-1553 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting Affected: 4.2.0; 4.2.5 |
| CVE-2017-1552 | 5.4 | Nov 1 | IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection Affected: 4.2.0; 4.2.5 |
| CVE-2017-1336 | 4.4 | Dec 7 | IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files Affected: 4.2.0 |
| CVE-2015-5020 | 4.3 | Jan 2 | The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary… Affected: 3.0.0.0; 3.0.0.1; 3.0.0.2; 4.0.0.0 |
Showing 7