| Package | Affected versions | Patched versions |
|---|---|---|
| activematrix bpm | = 1.0.1= 1.0.2= 1.1.0= 1.1.1≤ 1.2.0 | |
| activematrix businessworks | ≤ 5.9.2 | |
| activematrix businessworks service engine | = 5.6.0= 5.6.3= 5.6.4= 5.7= 5.7.1= 5.7.2= 5.8= 5.9.0= 5.9.1= 5.9.2≤ 5.8.1 | |
| activematrix service bus | = 2.0.0= 2.0.1= 2.0.2= 2.1.0= 2.2.0= 2.2.1= 2.3.0= 2.3.1= 3.0.0= 3.0.1 | |
| activematrix service grid | = 2.0.0= 2.0.1= 2.1.0= 2.2.0= 2.2.1= 2.3.0= 2.3.1= 2.3.2= 3.0.0= 3.0.1= 3.1.0= 3.1.2 | |
| businessevents | = 3.0= 3.0.1= 3.0.2= 4.0= 4.0.1= 5.0 | |
| silver fabric activematrix service grid distribution | = 3.1.3= 5.9.2 |
TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free