Threat database

7 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.7	EPSS 0.3%	CVE-2026-4034Administrator · Vulnerability High8.7EPSS 0.3%2026-09-29CVE Database V5CVE-2026-4034 Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console. EPSS 0.3%Vulnerability Tibco	CVE Database V5	2026-09-29
High	8.7	EPSS 0.4%	CVE-2026-3912ActiveMatrix BusinessWorks · Vulnerability High8.7EPSS 0.4%2026-03-24CVE Database V5CVE-2026-3912 Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosure, including exposure of accessible local files and host system details, and may allow manipulation of application behaviour. EPSS 0.4%Vulnerability Tibco United States Germany+10	CVE Database V5	2026-03-24
High	8.7	EPSS 0.6%	CVE-2026-3207TIBCO BPM Enterprise · Missing authentication for critical function High8.7EPSS 0.6%2026-03-17CVE Database V5CVE-2026-3207 Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access. EPSS 0.6%Vulnerability TIBCO #cwe-306 United States+9	CVE Database V5	2026-03-17
High	7.7	KEVEPSS 48%	CVE-2018-5430JasperReports · TIBCO JasperReports Server Information Disclosure Vulnerability High7.7KEVEPSS 48%2022-12-29CISA KEVCVE-2018-5430 CVE-2018-5430 is a vulnerability in TIBCO JasperReports Server that allows any authenticated user to gain read-only access to the web application's contents, including important configuration files. This information disclosure flaw has been exploited in the wild and is considered high severity. KEVEPSS 48%Vulnerability TIBCO #exploited-in-the-wild	CISA KEV	2022-12-29
Critical	9.9	KEVEPSS 79%	CVE-2018-18809JasperReports · TIBCO JasperReports Library Directory Traversal Vulnerability Critical9.9KEVEPSS 79%2022-12-29CISA KEVCVE-2018-18809 CVE-2018-18809 is a directory traversal vulnerability in TIBCO JasperReports Library that allows web server users to access arbitrary files on the host system. This vulnerability has been exploited in the wild and is considered high severity due to the potential exposure of sensitive system files. KEVEPSS 79%Vulnerability TIBCO #exploited-in-the-wild	CISA KEV	2022-12-29
High	8.0	EPSS 1.1%	CVE-2022-30578TIBCO EBX Add-ons · Successful execution of these vulnerabilities will result in an attacker being able to execute commands with the privileges of the affected user. High8.0EPSS 1.1%2022-09-21CVE Database V5CVE-2022-30578 The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below. EPSS 1.1%Vulnerability TIBCO Software Inc.Germany France+7	CVE Database V5	2022-09-21
High	7.1	EPSS 0.6%	CVE-2022-30579TIBCO Spotfire Analytics Platform for AWS Marketplace · Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to Spotfire Server data and the ability to cause a partial denial of service. This vulnerability could allow an attacker to access resources other than the vulnerable system. High7.1EPSS 0.6%2022-09-20CVE Database V5CVE-2022-30579 The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to execute blind Server Side Request Forgery (SSRF) on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 12.0.0 and TIBCO Spotfire Server: version 12.0.0. EPSS 0.6%Vulnerability TIBCO Software Inc.Germany France+6	CVE Database V5	2022-09-20

Showing 1–7 of 7 results