Vulnerabilities for Activematrix businessworks (...) - CXSECURITY.COM

Vulnerabilities for 'Activematrix businessworks'

2019-04-09

CVE-2019-8990

CWE-287

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the BusinessWorks engine even when authentication is required. This possibility is restricted to circumstances where HTTP "Basic Authentication" policy is used in conjunction with an XML Authentication resource. The BusinessWorks engine might instead use credentials from a prior HTTP request for authorization purposes. Affected releases are TIBCO Software Inc. TIBCO ActiveMatrix BusinessWorks: versions up to and including 6.4.2.

2018-08-08

CVE-2018-12408

CWE-611

The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML eXternal Entity (XXE) attacks via incoming network messages, and may disclose the contents of files accessible to a running BusinessWorks engine Affected releases are TIBCO Software Inc. TIBCO ActiveMatrix BusinessWorks: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks for z/Linux: versions up to and including 5.13.0, TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric: versions up to and including 5.13.0.

2012-03-13

CVE-2012-0687

CWE-200

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.

>>> Vendor: Tibco 142 Products

Hawk monitoring agent

Enterprise message service

Smartsockets rtserver

Adapter files z os

Iprocess engine

Rendezvous datasecurity

Substantiation es

Mainframe service tracker

Activematrix businessworks service engine

Activematrix service bus

Activematrix service grid

Activematrix service performance manager

Activematrix bpm

Silver bpm service

Silver cap service

Collaborative information manager

Silver businessworks service

Iprocess workspace

Spotfire analytics server

Spotfire server

Managed file transfer command center

Managed file transfer internet server

Activematrix businessworks

Silver fabric activematrix service grid distribution

Spotfire professional

Web player automation services

Spotfire statistics services

Spotfire web player

Enterprise administrator

Enterprise administrator sdk

Messaging appliance

Automation services

Silver fabric enabler

Spotfire deployment kit

Activematrix management agent

Activematrix policy agent

Activematrix policy manager

Silver fabric enabler for spotfire webplayer

Spotfire analyst

Spotfire analytics platform for aws

Spotfire automation services

Spotfire desktop

Spotfire desktop language packs

Rendezvous network server

Enterprise message service appliance

Enterprise message service appliance firmware

Jasperreports server community edition

Jasperreports server for activematrix bpm

Jasperreports server

Jaspersoft for aws with multitenancy

Jaspersoft reporting and analytics for aws

Jasperreports library community edition

Jaspersoft studio for activematrix bpm

Jasperreports professional

Jaspersoft for aws with multi-tenancy

Jasperreports library for activematrix bpm

Jasperreports library

Jaspersoft reporting and analytics

Jaspersoft studio

Businessworks process monitor

Datasynapse gridserver manager

Data virtualization

Silver fabric enabler for spotfire web player

Spotfire connectors

Spotfire client

Spotfire web player client

Activematrix businessworks distribution for tibco silver fabric

Statistica server

Messaging - apache kafka distribution - schema repository

Rendezvous for z/linux

Rendezvous for z/os

Data science for aws

Spotfire data science

Activematrix business process management

Activematrix policy director

See all Products for Vendor Tibco

Copyright 2024, cxsecurity.com