tibco

Latest CVEs · RSS

• CVE-2026-4034 2026-09-29 · CVSS 8.7
  Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based admin
• CVE-2026-3912 2026-03-24 · CVSS 8.7
  Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information di
• CVE-2026-3207 2026-03-17 · CVSS 8.7
  Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
• CVE-2025-11548 2025-10-14 · CVSS 9.3
  A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthentic
• CVE-2025-2261 2025-05-21 · CVSS 7.0
  Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of t
• CVE-2025-3751 2025-05-21 · CVSS 7.0
  The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised acce
• CVE-2025-3115 2025-04-09 · CVSS 9.4
  Injection Vulnerabilities: Attackers can inject malicious code, potentially gaining control over the system executing these functions. Additionally, insufficien
• CVE-2025-3114 2025-04-09 · CVSS 9.4
  Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, poten
• CVE-2024-10218 2024-11-12 · CVSS 9.2
  XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence
• CVE-2024-10217 2024-11-12 · CVSS 9.2
  XSS Attack in mar.jar, Monitoring Archive Utility (MAR Utility), monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence
• CVE-2024-3325 2024-07-10 · CVSS 8.6
  Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.
• CVE-2024-3331 2024-06-27 · CVSS 6.8
  Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfir
• CVE-2024-3330 2024-06-27 · CVSS 9.9
  Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client:
• CVE-2024-4576 2024-06-13
  The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosu
• CVE-2024-3182 2024-05-15 · CVSS 6.5
  Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows
• CVE-2024-3323 2024-04-17 · CVSS 8.3
  Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable
• CVE-2024-1137 2024-03-12 · CVSS 4.3
  The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise Edition contain a vulnerability that theoretically allows an Active Spa
• CVE-2024-1138 2024-03-12 · CVSS 8.8
  The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a low privileged attacker with network acc
• CVE-2023-26222 2023-11-14 · CVSS 8.7
  The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulne
• CVE-2023-26221 2023-11-08 · CVSS 5.0
  The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marketplace contains an easily exploitable vu
• CVE-2023-26219 2023-10-24 · CVSS 7.4
  The Hawk Console and Hawk Agent components of TIBCO Software Inc.'s TIBCO Hawk, TIBCO Hawk Distribution for TIBCO Silver Fabric, TIBCO Operational Intelligence
• CVE-2023-26220 2023-10-10 · CVSS 5.4
  The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low priv
• CVE-2023-26218 2023-09-29 · CVSS 8.0
  The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low
• CVE-2023-26217 2023-07-19 · CVSS 8.8
  The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user wit
• CVE-2023-26215 2023-05-25 · CVSS 7.7
  The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read