Description
Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TIBCO | TIBCO BPM Enterprise | 4.3 – < 5 | 5 |
High · 8.7
CVE-2026-3207
EUVD-2026-12625
TIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability
Published Mar 17, 2026 · Updated Mar 17, 2026 · Assigned by tibco