Configuration Issue in TIBCO BPM Enterprise Allowing Unauthorized Access
CVE-2026-3207

8.7HIGH

Key Information:

Vendor

Tibco
Status
Tibco Bpm Enterprise
Vendor
CVE Published:
17 March 2026

What is CVE-2026-3207?

A configuration issue within the Java Management Extensions (JMX) for TIBCO BPM Enterprise version 4.x can lead to unauthorized access, compromising the security of the application. This vulnerability highlights the importance of proper configuration management to prevent unauthorized exploitation. Organizations should review their configurations and implement appropriate safeguards.

Affected Version(s)

TIBCO BPM Enterprise 4.3 < 5

References

https://community.tibco.com/advisories/tibco-security-adv...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.