---
id: "CVE-2013-3993"
kind: "vulnerability"
aliases: ["CVE-2013-3993"]
title: "IBM InfoSphere BigInsights: IBM InfoSphere BigInsights Invalid Input Vulnerability"
severity: "medium"
cvss: 6.5
epss: 0.04766
exploited: true
status: "open"
category: "vendor"
products: [{"name": "IBM InfoSphere BigInsights", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "hadoop", "ibm", "infosphere-biginsights", "ransomware", "self-hosted", "vendor"]
not_affected_if: ["not-installed"]
published_at: "2014-07-07T11:01:28+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3993", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-3993", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3993", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# IBM InfoSphere BigInsights: IBM InfoSphere BigInsights Invalid Input Vulnerability

IBM InfoSphere BigInsights has an invalid-input flaw in certain APIs that can let an attacker read, write, modify, or delete data without authorization. CISA lists it in the Known Exploited Vulnerabilities catalog and notes the product is end-of-life.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:IBM InfoSphere BigInsights affected ? fixed ?

## How to check

Check whether IBM InfoSphere BigInsights is installed or reachable on your network; the sources do not give a command or file path.

## Fix

Disconnect the product if it is still in use, as CISA requires, since it is end-of-life and no vendor fix is named in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3993
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2013-3993
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2013-3993

## From the sources

Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_