CVE-2026-3912
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
TIBCO ActiveMatrix BusinessWorks Injection Vulnerability
Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ActiveMatrix BusinessWorks
- Vendor
- Tibco
- Product
- ActiveMatrix BusinessWorks
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.12.0 | affected | Hotfix | HF1 | Unavailable | None listed |
| 6.11.0 | affected | Hotfix | HF4 | Unavailable | None listed |
| 6.10.0 | affected | Hotfix | HF6 | Unavailable | None listed |
| 6.9.1 | affected | Hotfix | HF8 | Unavailable | None listed |
Enterprise Administrator
- Vendor
- Tibco
- Product
- Enterprise Administrator
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.4.3 | affected | Hotfix | HF2 | Unavailable | None listed |