IBM Data Studio vulnerabilities

3 CVEs affecting IBM Data Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2981, published 2013-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2981, published 2013-06-17. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-0467, published 2013-02-21. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Eclipse Help System (IEHS), as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL.
CVE-2013-2980, published 2013-06-17. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access…