CVE-2019-8991 TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities

The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and...

CVE-2019-8995

CVE-2019-8995 affects TIBCO ActiveMatrix BPM and related products: Workspace, Openspace, and App Development clients up to versions 4.2.0 (and 1.4.1 for Silver Fabric Enabler). Root cause described as an open redirect where a malicious URL could cause a user to visit an attacker-controlled site. ...

CVE-2019-11203 TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities

The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting XSS and cross-site request...

CVE-2019-8992

The CVE-2019-8992 vulnerability affects the administrative server components across TIBCO ActiveMatrix BPM and related products. A user without privileges to upload distributed application archives (Upload DAA) could upload arbitrary code and, in some cases, execute it on ActiveMatrix Service Gri...

CVE-2019-8993

CVE-2019-8993 affects TIBCO ActiveMatrix BPM and related components. The administrative web server in these products could allow an unauthenticated user to download a file containing credentials information. Affected releases include: ActiveMatrix BPM up to 4.2.0; BPM Distribution for Silver Fabr...

PT-2019-19296 · Tibco · Tibco Silver Fabric Activematrix Service Grid Distribution +7

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director versions up to and including 1.1.0 TIBCO ActiveMatrix...

PT-2019-19295 · Tibco Software · Tibco Silver Fabric Activematrix Service Grid Distribution +7

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director versions up to and including 1.1.0 TIBCO ActiveMatrix...

PT-2019-19298 · Tibco · Tibco Silver Fabric Enabler For Activematrix Bpm +2

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO Silver Fabric Enabler for ActiveMatrix BPM versions up to and including 1.4.1...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8992

TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: CVE-2019-8992 Source: TIBCOSoftware Inc. TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: -- Source: TIB...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8992

TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: CVE-2019-8992 Source: TIBCOSoftware Inc. TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: -- Source: TIB...

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-11203

TIBCO BPM Enterprise Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date: April24, 2019 Last revised: CVE-2019-11203 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date:...

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8995

TIBCO BPM Enterprise Open Redirect Vulnerability Original release date: April 24,2019 Last revised: CVE-2019-8995 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Open Redirect Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBC...

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8995

TIBCO BPM Enterprise Open Redirect Vulnerability Original release date: April 24,2019 Last revised: CVE-2019-8995 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Open Redirect Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBC...

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8994

TIBCO BPM Enterprise Escalation of Privileges Vulnerability Original release date:April 24, 2019 Last revised: CVE-2019-8994 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc...

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-8994

TIBCO BPM Enterprise Escalation of Privileges Vulnerability Original release date:April 24, 2019 Last revised: CVE-2019-8994 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability Original release date: April 24, 2019 Last revised: -- Source: TIBCO Software Inc...

CVE-2019-8990

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the BusinessWorks engine even when authentication is required. This possibility is restricted to circumstances...

CVE-2019-8990 TIBCO ActiveMatrix BusinessWorks Fails To Properly Enforce Authentication

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the BusinessWorks engine even when authentication is required. This possibility is restricted to circumstances...

CVE-2019-8990

The CVE-2019-8990 issue affects the HTTP Connector component of TIBCO ActiveMatrix BusinessWorks. It allows unauthenticated HTTP requests to be processed by the BusinessWorks engine when authentication is required, but only in configurations where HTTP Basic Authentication is used alongside an XM...

PT-2019-19293 · Tibco · Tibco Activematrix Businessworks

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BusinessWorks versions up to and including 6.4.2 Description: The HTTP Connector component of TIBCO ActiveMatrix BusinessWorks contains an issue that allows unauthenticated HTTP requests to be processed by the BusinessWorks...

Directory traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...