Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-3912

TIBCO ActiveMatrix BusinessWorks Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tibco

Description

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tibco ActiveMatrix BusinessWorks

Default version status: unaffected

  • 6.12.0 to < HF1affected
  • 6.11.0 to < HF4affected
  • 6.10.0 to < HF6affected
  • 6.9.1 to < HF8affected

Tibco Enterprise Administrator

Default version status: unaffected

  • 2.4.3 to < HF2affected

References