Improper input validation in Tibco Activematrix Businessworks
CVE-2026-3912
Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.
Affected products
- Tibco Activematrix Businessworks — versions 6.12.0, 6.11.0, 6.10.0
- Tibco Enterprise Administrator — versions 2.4.3