TIBCO Activematrix Businessworks vulnerabilities

4 CVEs affecting TIBCO Activematrix Businessworks, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3912, published 2026-03-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-8990, published 2019-04-09. High severity, CVSS 8.1. EPSS: 2.9% chance of exploitation in the next 30 days. The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the…
CVE-2018-12408, published 2018-08-08. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO…
CVE-2012-0687, published 2012-03-13. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix…
CVE-2026-3912, published 2026-03-24. High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days. Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of…