CVE-2026-3912

Tuesday, March 24, 2026

8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Summary

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.

Affected Software

Vendor	Product	Version Range	Status
Tibco	ActiveMatrix BusinessWorks	`6.12.0 < HF1`	affected
Tibco	ActiveMatrix BusinessWorks	`6.11.0 < HF4`	affected
Tibco	ActiveMatrix BusinessWorks	`6.10.0 < HF6`	affected
Tibco	ActiveMatrix BusinessWorks	`6.9.1 < HF8`	affected
Tibco	Enterprise Administrator	`2.4.3 < HF2`	affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: total

References

https://community.tibco.com/advisories/tibco-security-advisory-march-24-2026-tibco-activematrix-businessworks-cve-2026-3912-r227/

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.