CVE-2019-11203

The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting XSS and cross-site request...

Design/Logic Flaw

The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution f...

Design/Logic Flaw

The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user...

Cross site request forgery (csrf)

The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting XSS and cross-site request...

CVE-2019-11203

The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting XSS and cross-site request...

Cross site request forgery (csrf)

The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and...

Input validation

The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact...

CVE-2019-8994

CVE-2019-8994 affects TIBCO ActiveMatrix BPM workspace client, including: BPM itself (<= 4.2.0), BPM Distribution for TIBCO Silver Fabric (<= 4.2.0), and Silver Fabric Enabler for ActiveMatrix BPM (

CVE-2019-8991

CVE-2019-8991 affects TIBCO ActiveMatrix BPM family via the administrator web interface, with XSS and CSRF vulnerabilities. Affected versions include: BPM up to 4.2.0; BPM Distribution for Silver Fabric up to 4.2.0; Policy Director up to 1.1.0; Service Bus up to 3.3.0; Service Grid up to 3.3.1; S...

CVE-2019-8995

CVE-2019-8995 affects TIBCO ActiveMatrix BPM and related products: Workspace, Openspace, and App Development clients up to versions 4.2.0 (and 1.4.1 for Silver Fabric Enabler). Root cause described as an open redirect where a malicious URL could cause a user to visit an attacker-controlled site. ...

CVE-2019-11203

The CVE covers XSS and CSRF vulnerabilities in TIBCO ActiveMatrix BPM components: Workspace client, Openspace client, App Development client, and REST API. Affected are BPM up to 4.2.0, BPM Distribution for Silver Fabric up to 4.2.0, and Silver Fabric Enabler for ActiveMatrix BPM up to 1.4.1. Roo...

CVE-2019-8993

CVE-2019-8993 affects TIBCO ActiveMatrix BPM and related components. The administrative web server in these products could allow an unauthenticated user to download a file containing credentials information. Affected releases include: ActiveMatrix BPM up to 4.2.0; BPM Distribution for Silver Fabr...

CVE-2019-11203 TIBCO ActiveMatrix BPM Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities

The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting XSS and cross-site request...

CVE-2019-8994 TIBCO ActiveMatrix BPM Escalation of Privileges Vulnerability

The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact...

CVE-2019-8992

The CVE-2019-8992 vulnerability affects the administrative server components across TIBCO ActiveMatrix BPM and related products. A user without privileges to upload distributed application archives (Upload DAA) could upload arbitrary code and, in some cases, execute it on ActiveMatrix Service Gri...

CVE-2019-8995 TIBCO ActiveMatrix BPM Open Redirect Vulnerability

The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user...

PT-2019-19296 · Tibco · Tibco Silver Fabric Activematrix Service Grid Distribution +7

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO ActiveMatrix Policy Director versions up to and including 1.1.0 TIBCO ActiveMatrix...

PT-2019-19298 · Tibco · Tibco Silver Fabric Enabler For Activematrix Bpm +2

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions up to and including 4.2.0 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions up to and including 4.2.0 TIBCO Silver Fabric Enabler for ActiveMatrix BPM versions up to and including 1.4.1...

PT-2019-19294 · Tibco Software · Tibco Activematrix Policy Director +6

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix BPM versions prior to 4.2.1 TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric versions prior to 4.2.1 TIBCO ActiveMatrix Policy Director versions prior to 1.1.1 TIBCO ActiveMatrix Service Bus versions prior to 3.3...

CVE-2019-2706

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: BPM Foundation Services. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...