TIBCO Bpm Enterprise vulnerabilities

3 CVEs affecting TIBCO Bpm Enterprise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3207, published 2026-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3207, published 2026-03-17. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
CVE-2022-22775, published 2022-05-17. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains difficult to exploit Reflected Cross Site Scripting…
CVE-2021-23272, published 2021-01-26. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically…