CVE-2026-3912

TIBCO ActiveMatrix BusinessWorks Injection Vulnerability

High · published March 24, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.00397 · 32.7th percentile
Published
2026-03-24T20:44Z
EPSS history
Timeline
  • 24 MAR 20:44Z
    TIBCO ActiveMatrix BusinessWorks Injection Vulnerability
    cvelistv5