known ransomware use

IBM InfoSphere BigInsights Invalid Input Vulnerability

Added to KEV
2022-05-25
Federal due date
2022-06-15
Vendor
IBM
Product
InfoSphere BigInsights
EPSS
96.4th percentile (score 0.265, as of 2026-06-08)
NVD CVSS v3.1
Ransomware use
Known
Upstream
https://nvd.nist.gov/vuln/detail/CVE-2013-3993

CISA short description

Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

EPSS percentile is the FIRST.org exploit-probability ranking as of the date noted above; it moves daily. CVSS reflects NVD's analysis at time of publication.