IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 65.00 |
| Exploitation signal(KEV listed) | ×1.50 |
| Ransomware bonus | +5.00 |
| VPI | 100.00 |
VPI formula vpi-v1
Required Action
The impacted product is end-of-life and should be disconnected if still in use.
| Source | CVSS Version | Base Score | Severity | Vector String | Assessment Date |
|---|---|---|---|---|---|
| NVDNIST | 3.1 | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | 04/20/2026 |
| NVDNIST | 2.0 | 3.5 |
| AV:N/AC:M/Au:S/C:P/I:N/A:N |
| 04/20/2026 |