Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_biginsights:4.0.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Biginsights (0017fd62-2ae2-50a8-9742-aa88c5c64580)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5020 vulnerable 2026-06-08 05:06:48.599028 Details available
The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary tables via unspecified vectors.
Published: 2016-01-02T02:00:00.000Z
Updated: 2024-08-06T06:32:31.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4940 not_vulnerable 2026-06-08 05:06:48.098221 Details available
Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in a configuration file, which allows local users to obtain sensitive information by reading this file.
Published: 2015-11-08T22:00:00.000Z
Updated: 2024-08-06T06:32:31.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4928 not_vulnerable 2026-06-08 05:06:48.015990 Details available
Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Configs screen, which allows physically proximate attackers to obtain sensitive information by reading password fields.
Published: 2015-11-08T22:00:00.000Z
Updated: 2024-08-06T06:32:31.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1947 vulnerable 2026-06-08 05:06:26.957457 Details available
Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is loaded by a setuid or setgid program.
Published: 2015-12-31T16:00:00.000Z
Updated: 2024-08-06T05:02:42.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.