Injection Vulnerability in TIBCO ActiveMatrix BusinessWorks and Enterprise Administrator
CVE-2026-3912
8.7HIGH
Key Information:
- Vendor
Tibco
- Vendor
- CVE Published:
- 24 March 2026
What is CVE-2026-3912?
The identified vulnerabilities in TIBCO's ActiveMatrix BusinessWorks and Enterprise Administrator stem from improper validation and sanitization of user-supplied input. This flaw can lead to significant security risks, including unauthorized information disclosure that may reveal sensitive local file data and details about the host system. Furthermore, it could enable an attacker to manipulate the application behavior, posing a threat to data integrity and operational stability. Organizations using these TIBCO products should review their security measures and apply necessary updates as highlighted in the referenced advisory.
Affected Version(s)
ActiveMatrix BusinessWorks 6.12.0
ActiveMatrix BusinessWorks 6.11.0
ActiveMatrix BusinessWorks 6.10.0