CVE-2026-3912 — TIBCO ActiveMatrix BusinessWorks Injection Vulnerability

CVE-2026-3912

TIBCO ActiveMatrix BusinessWorks Injection Vulnerability PUBLISHED

Description (CNA)

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour.

Affected (CNA)

Vendor / product	Versions
Tibco / ActiveMatrix BusinessWorks	affected 6.12.0 before HF1; affected 6.11.0 before HF4; affected 6.10.0 before HF6; affected 6.9.1 before HF8
Tibco / Enterprise Administrator	affected 2.4.3 before HF2

CWE

No CWE identifiers supplied.

References

https://community.tibco.com/advisories/tibco-security-advisory-march-24-2026-tibco-activematrix-businessworks-cve-2026-3912-r227/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.