Medium (6.5) in IBM InfoSphere BigInsights. In CISA KEV since 2022-05-25, with known ransomware use. EPSS 4.8% chance of exploitation in the next 30 days.
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls.
Severity
CVSS 3.1
6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-05-25, due 2022-06-15, known ransomware use