Description
Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tibco | ActiveMatrix BusinessWorks | 6.12.0 – < HF1, 6.11.0 – < HF4, 6.10.0 – < HF6, 6.9.1 – < HF8 | HF1 |
| Tibco | Enterprise Administrator | 2.4.3 – < HF2 | HF2 |
Advisories 1
- WID-SEC-2026-0842 TIBCO ActiveMatrix: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von Daten BSI CERT-Bund (WID) · Mar 24, 2026