TIBCO Security Advisory: March 24, 2026 - TIBCO ActiveMatrix BusinessWorks - CVE-2026-3912

TIBCO ActiveMatrix BusinessWorks Injection Vulnerability Original release date: March 24, 2026 Last revised: --- CVE-2026-3912 Source: TIBCO Software Inc. Products Affected TIBCO ActiveMatrix BusinessWorks 6.x TIBCO Enterprise Administrator 2.4.3 Component Affected: Administration Description...

Tibco ActiveMatrix BusinessWorks和Tibco Enterprise Administrator 安全漏洞

Tibco ActiveMatrix BusinessWorks and Tibco Enterprise Administrator are both products of the American company Tibco. Tibco ActiveMatrix BusinessWorks is an integrated platform software for enterprise application integration and service orchestration. Tibco Enterprise Administrator is a management...

EUVD-2010-3489

Malware in sbrugna...

EUVD-2010-4463

Malware in sbrugna...

EUVD-2014-5177

Malware in sbrugna...

EUVD-2019-18378

Malware in sbrugna...

EUVD-2019-18379

Malware in sbrugna...

EUVD-2012-0721

Malware in sbrugna...

EUVD-2019-18382

Malware in sbrugna...

EUVD-2012-0720

Malware in sbrugna...

EUVD-2019-18381

Malware in sbrugna...

EUVD-2025-16066

Malicious code in bioql PyPI...

CVE-2012-0688

Cross-site scripting XSS vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to inject arbitra...

CVE-2012-0689

The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0 allows remote attackers to discover credentials via unspecified vecto...

CVE-2025-2261

Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application...

CVE-2025-2261

CVE-2025-2261 is a Stored XSS in TIBCO ActiveMatrix Administrator affecting TIBCO BPM Enterprise. The vulnerability arises when user input is stored in a data store and later rendered without proper filtering, allowing malicious data to appear as part of the website and run in a user’s browser wi...

CVE-2025-3751 TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability

The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information...

CVE-2025-3751

CVE-2025-3751 affects TIBCO ActiveMatrix BusinessWorks 5.16.1 with the UDDI Plugin “TIBCO Administrator” . The vulnerability enables a SQL Injection that could allow an attacker to achieve unauthorized access to the database and exposure of sensitive information . The issue is tied to the product...

CVE-2025-3751 TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability

The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information...

PT-2025-22418 · Tibco · Tibco Activematrix Administrator

Name of the Vulnerable Software and Affected Versions: TIBCO ActiveMatrix Administrator affected versions not specified Description: The issue allows malicious data to appear as part of the website and run within a user's browser under the privileges of the web application. This is due to a Store...