Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_biginsights:2.0.0.0:*:*:*:*:*:*:*

part: a version: 2.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Biginsights (0017fd62-2ae2-50a8-9742-aa88c5c64580)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0905 vulnerable 2026-06-08 05:05:14.995754 Details available
IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2014-08-17T23:00:00.000Z
Updated: 2024-08-06T09:27:20.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3998 vulnerable 2026-06-08 05:04:33.466117 Details available
CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Published: 2014-03-26T10:00:00.000Z
Updated: 2024-08-06T16:30:49.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3997 vulnerable 2026-06-08 05:04:33.462842 Details available
Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2014-03-26T10:00:00.000Z
Updated: 2024-08-06T16:30:49.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3996 vulnerable 2026-06-08 05:04:33.462364 Details available
IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.
Published: 2013-08-05T20:00:00.000Z
Updated: 2024-08-06T16:30:49.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3995 vulnerable 2026-06-08 05:04:33.461780 Details available
Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-08-05T20:00:00.000Z
Updated: 2024-08-06T16:30:49.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3992 vulnerable 2026-06-08 05:04:33.455452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.