CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

695 matches found

CVE•added 2019/04/24 8:20 p.m.•68 views

CVE-2019-8993

CVE-2019-8993 affects TIBCO ActiveMatrix BPM and related components. The administrative web server in these products could allow an unauthenticated user to download a file containing credentials information. Affected releases include: ActiveMatrix BPM up to 4.2.0; BPM Distribution for Silver Fabr...

9.8CVSS9.3AI score0.02531EPSS

SaveExploits0References3Affected Software5

CVE•added 2019/04/24 8:20 p.m.•67 views

CVE-2019-11203

The CVE covers XSS and CSRF vulnerabilities in TIBCO ActiveMatrix BPM components: Workspace client, Openspace client, App Development client, and REST API. Affected are BPM up to 4.2.0, BPM Distribution for Silver Fabric up to 4.2.0, and Silver Fabric Enabler for ActiveMatrix BPM up to 1.4.1. Roo...

8.8CVSS6.6AI score0.00686EPSS

SaveExploits0References3Affected Software2

CVE•added 2019/04/24 8:20 p.m.•81 views

CVE-2019-8995

CVE-2019-8995 affects TIBCO ActiveMatrix BPM and related products: Workspace, Openspace, and App Development clients up to versions 4.2.0 (and 1.4.1 for Silver Fabric Enabler). Root cause described as an open redirect where a malicious URL could cause a user to visit an attacker-controlled site. ...

6.1CVSS5.4AI score0.01137EPSS

SaveExploits0References3Affected Software2

CVE•added 2019/04/24 8:20 p.m.•68 views

CVE-2019-8991

CVE-2019-8991 affects TIBCO ActiveMatrix BPM family via the administrator web interface, with XSS and CSRF vulnerabilities. Affected versions include: BPM up to 4.2.0; BPM Distribution for Silver Fabric up to 4.2.0; Policy Director up to 1.1.0; Service Bus up to 3.3.0; Service Grid up to 3.3.1; S...

8.8CVSS8.7AI score0.00949EPSS

SaveExploits0References3Affected Software5

Cvelist•added 2019/04/24 8:20 p.m.•36 views

CVE-2019-8994 TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability

The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact...

5.4CVSS5AI score0.00782EPSS

SaveExploits0References3

CVE•added 2019/04/24 8:20 p.m.•69 views

CVE-2019-8994

CVE-2019-8994 affects TIBCO ActiveMatrix BPM workspace client, including: BPM itself (<= 4.2.0), BPM Distribution for TIBCO Silver Fabric (<= 4.2.0), and Silver Fabric Enabler for ActiveMatrix BPM (

5.4CVSS5.1AI score0.00782EPSS

SaveExploits0References3Affected Software2

CVE•added 2019/04/24 8:20 p.m.•75 views

CVE-2019-8992

The CVE-2019-8992 vulnerability affects the administrative server components across TIBCO ActiveMatrix BPM and related products. A user without privileges to upload distributed application archives (Upload DAA) could upload arbitrary code and, in some cases, execute it on ActiveMatrix Service Gri...

9.9CVSS8.9AI score0.02123EPSS

SaveExploits0References3Affected Software5

Positive Technologies•added 2019/04/24 12:00 a.m.•27 views

PT-2019-19294 · Tibco Software · Tibco Activematrix Policy Director +6

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions prior to 4.2.1 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions prior to 4.2.1 TIBCO ActiveMatrix Policy Director versions prior to 1.1.1 TIBCO ActiveMatrix Service Bus versions prior to 3.3...

8.8CVSS8.6AI score0.00949EPSS

SaveExploits0References4

Positive Technologies•added 2019/04/24 12:00 a.m.•24 views

PT-2019-19298 · Tibco · Tibco Silver Fabric Enabler For Activematrix Bpm +2

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO Silver Fabric Enabler for ActiveMatrix BPM versions up to and including 1.4.1...

6.1CVSS4.9AI score0.01137EPSS

SaveExploits0References5

Positive Technologies•added 2019/04/24 12:00 a.m.•16 views

PT-2019-19296 · Tibco · Tibco Silver Fabric Activematrix Service Grid Distribution +7

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director versions up to and including 1.1.0 TIBCO ActiveMatrix...

9.8CVSS8.6AI score0.02531EPSS

SaveExploits0References4

OSV•added 2019/04/23 7:32 p.m.•16 views

CVE-2019-2706

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS7.3AI score0.02014EPSS

SaveExploits0References2

Vulnrichment•added 2019/04/23 6:16 p.m.•19 views

CVE-2019-2706

7.2AI score0.02014EPSS

SaveExploits0References2

Cvelist•added 2019/04/23 6:16 p.m.•31 views

CVE-2019-2706

8.3AI score0.02014EPSS

SaveExploits0References2

CVE•added 2019/04/23 6:16 p.m.•62 views

CVE-2019-2706

CVE-2019-2706 affects Oracle Fusion Middleware’s Business Process Management Suite (BPM) , specifically the subcomponent BPM Foundation Services (v 11.1.1.9.0). The vulnerability allows an unauthenticated attacker who can reach the BPM over HTTP to compromise the BPM Suite; attacks require human ...

8.2CVSS8.2AI score0.02014EPSS

SaveExploits0References2Affected Software1

Tibco•added 2019/04/22 5:59 p.m.•25 views

TIBCO Security Advisory: April 24, 2019 - TIBCO BPM Enterprise -2019-11203

TIBCO BPM Enterprise Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date: April24, 2019 Last revised: CVE-2019-11203 Source: TIBCO Software Inc. TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities Original release date:...

4.3CVSS6.4AI score0.00686EPSS