CVE-2019-8995

CVE-2019-8995 affects TIBCO ActiveMatrix BPM and related products: Workspace, Openspace, and App Development clients up to versions 4.2.0 (and 1.4.1 for Silver Fabric Enabler). Root cause described as an open redirect where a malicious URL could cause a user to visit an attacker-controlled site. ...

CVE-2012-0687

CVE-2012-0687 affects multiple TIBCO ActiveMatrix components, enabling information disclosure via crafted URLs. Affected products (as documented): ActiveMatrix Runtime Platform components (Service Grid, Service Bus, BusinessWorks Service Engine) across multiple versions and editions (e.g., 2.x pr...

CVE-2019-8992

The CVE-2019-8992 vulnerability affects the administrative server components across TIBCO ActiveMatrix BPM and related products. A user without privileges to upload distributed application archives (Upload DAA) could upload arbitrary code and, in some cases, execute it on ActiveMatrix Service Gri...

CVE-2019-8991

CVE-2019-8991 affects TIBCO ActiveMatrix BPM family via the administrator web interface, with XSS and CSRF vulnerabilities. Affected versions include: BPM up to 4.2.0; BPM Distribution for Silver Fabric up to 4.2.0; Policy Director up to 1.1.0; Service Bus up to 3.3.0; Service Grid up to 3.3.1; S...

CVE-2019-8993

CVE-2019-8993 affects TIBCO ActiveMatrix BPM and related components. The administrative web server in these products could allow an unauthenticated user to download a file containing credentials information. Affected releases include: ActiveMatrix BPM up to 4.2.0; BPM Distribution for Silver Fabr...

CVE-2010-4495

The CVE-2010-4495 entry concerns TIBCO ActiveMatrix components with a critical vulnerability in handling of JMX connections, allowing remote authenticated users to execute arbitrary code. Affected products include: TIBCO ActiveMatrix Service Grid (versions 3.0.0, 3.0.1, 3.1.0); ActiveMatrix Servi...

CVE-2012-0689

CVE-2012-0689 affects TIBCO ActiveMatrix Platform components: Service Grid 3.x before 3.1.5, Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, BPM before 1.3.0, and TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3. Root cause per advisory: server may d...

CVE-2012-0688

CVE-2012-0688 is a cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform components, affecting TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3 and the Service Grid/Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0. The i...