TIBCO

Products

ProductCVEsExploitedLatest
ActiveMatrix BusinessWorks1–Mar 24, 2026
Administrator1–Sep 29, 2026
EBX1–Jun 13, 2024
Enterprise Administrator1–Mar 24, 2026
Hawk1–May 15, 2024
JasperReports Server1–Apr 17, 2024
TIBCO BPM Enterprise1–Mar 17, 2026

Exploited and recent CVEs

  • CVE-2026-4034 High 8.7 TIBCO Administrator Injection Vulnerability 0.3%
  • CVE-2026-3912 High 8.7 TIBCO ActiveMatrix BusinessWorks Injection Vulnerability 0.3%
  • CVE-2026-3912 High 8.7 TIBCO ActiveMatrix BusinessWorks Injection Vulnerability 0.3%
  • CVE-2026-3207 High 8.7 TIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability 0.3%
  • CVE-2024-4576 Medium 5.3 TIBCO EBX File Inclusion Vulnerability 0.5%
  • CVE-2024-3182 Medium 6.5 Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service (EMS) 0.2%
  • CVE-2024-3323 High 8.3 Reflected Cross Site Scripting (XSS) vulnerability 0.4%