Improper input validation in IBM Infosphere Biginsights
CVE-2013-3997
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Infosphere_biginsights — versions 1.1.0.0, 1.1.0.1, 1.1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)