Read the docs
TI-2012-00632 Aliases CVE-2012-0687GHSA-gvqw-c58j-q64r

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and…

Priority LOW 25CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.

Why it matters now

EPSS 0.01281 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 50

CPEVersionsRoleVendor
cpe:2.3:a:tibco:activematrix_service_bus:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.3.0:*:*:*:*:*:*:*2.3.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:2.3.1:*:*:*:*:*:*:*2.3.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_bus:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableTIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_bus:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·TIBCO
Show 40 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:tibco:activematrix_service_grid:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.3.0:*:*:*:*:*:*:*2.3.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.3.1:*:*:*:*:*:*:*2.3.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:2.3.2:*:*:*:*:*:*:*2.3.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_service_grid:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:*:*:*:*:*:*:*:*up to 5.8.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.0:*:*:*:*:*:*:*5.6.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.3:*:*:*:*:*:*:*5.6.3VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.4:*:*:*:*:*:*:*5.6.4VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7:*:*:*:*:*:*:*5.7VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7.1:*:*:*:*:*:*:*5.7.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7.2:*:*:*:*:*:*:*5.7.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.8:*:*:*:*:*:*:*5.8VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.0:*:*:*:*:*:*:*5.9.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.1:*:*:*:*:*:*:*5.9.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.2:*:*:*:*:*:*:*5.9.2VulnerableTIBCO
cpe:2.3:a:tibco:silver_fabric_activematrix_service_grid_distribution:3.1.3:*:*:*:*:*:*:*3.1.3VulnerableTIBCO
cpe:2.3:a:tibco:silver_fabric_activematrix_service_grid_distribution:5.9.2:*:*:*:*:*:*:*5.9.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_bpm:*:*:*:*:*:*:*:*up to 1.2.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_bpm:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_bpm:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_bpm:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_bpm:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:3.0:*:enterprise:*:*:*:*:*3.0VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:3.0:*:inference:*:*:*:*:*3.0VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:3.0.1:*:enterprise:*:*:*:*:*3.0.1VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:3.0.2:*:enterprise:*:*:*:*:*3.0.2VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:3.0.2:*:inference:*:*:*:*:*3.0.2VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:4.0:*:standard:*:*:*:*:*4.0VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:4.0.1:*:standard:*:*:*:*:*4.0.1VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:5.0:*:express:*:*:*:*:*5.0VulnerableTIBCO
cpe:2.3:a:tibco:businessevents:5.0:*:standard:*:*:*:*:*5.0VulnerableTIBCO
cpe:2.3:a:tibco:activematrix_businessworks:*:*:*:*:*:*:*:*up to 5.9.2VulnerableTIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_service_grid:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:*:*:*:*:*:*:*:* Versions up to 5.8.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.0:*:*:*:*:*:*:* Versions 5.6.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.3:*:*:*:*:*:*:* Versions 5.6.3 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.6.4:*:*:*:*:*:*:* Versions 5.6.4 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7.1:*:*:*:*:*:*:* Versions 5.7.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.7.2:*:*:*:*:*:*:* Versions 5.7.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.0:*:*:*:*:*:*:* Versions 5.9.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.1:*:*:*:*:*:*:* Versions 5.9.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks_service_engine:5.9.2:*:*:*:*:*:*:* Versions 5.9.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:silver_fabric_activematrix_service_grid_distribution:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:silver_fabric_activematrix_service_grid_distribution:5.9.2:*:*:*:*:*:*:* Versions 5.9.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_bpm:*:*:*:*:*:*:*:* Versions up to 1.2.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_bpm:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_bpm:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_bpm:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_bpm:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:3.0:*:enterprise:*:*:*:*:* Versions 3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:3.0:*:inference:*:*:*:*:* Versions 3.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:3.0.1:*:enterprise:*:*:*:*:* Versions 3.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:3.0.2:*:enterprise:*:*:*:*:* Versions 3.0.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:3.0.2:*:inference:*:*:*:*:* Versions 3.0.2 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:4.0:*:standard:*:*:*:*:* Versions 4.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:4.0.1:*:standard:*:*:*:*:* Versions 4.0.1 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:5.0:*:express:*:*:*:*:* Versions 5.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:businessevents:5.0:*:standard:*:*:*:*:* Versions 5.0 Vulnerable ·TIBCO
  • cpe:2.3:a:tibco:activematrix_businessworks:*:*:*:*:*:*:*:* Versions up to 5.9.2 Vulnerable ·TIBCO

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-0687
  2. 2026-10-03 Alias added: GHSA-gvqw-c58j-q64r

References

Advisory 5

  • TI-2019-06484 TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File CVSS 3.1CRITICAL 9.8
  • TI-2010-04227 Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix… CVSS 2.0HIGH 9.0
  • TI-2019-06483 TIBCO Active Matrix Service Grid Administrator Remote Code Execution CVSS 3.1HIGH 8.8
  • TI-2019-06482 Cross-site request forgery in TIBCO ActiveMatrix BPM CVSS 3.1HIGH 8.8
  • TI-2019-06486 TIBCO ActiveMatrix BPM Open Redirect Vulnerability CVSS 3.1MEDIUM 6.1
  • TI-2012-00634 The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service… CVSS 2.0MEDIUM 5.0
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences