CVE-2026-3912: TIBCO Activematrix Businessworks

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.

Affected products

  • TIBCO Activematrix Businessworks
  • TIBCO Enterprise Administrator

Published 2026-03-24. Last modified 2026-06-17.