2
CVEs
0
Critical
2
High
0
KEV
0
PoC
1
Unpatched C/H
50.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Spotfire Server
22
Jasperreports Server
18
Spotfire Analytics Platform For Aws
16
Spotfire Analyst
10
Managed File Transfer Command Center
8
Spotfire Desktop
8
Managed File Transfer Internet Server
8
Spotfire Statistics Services
7
Spotfire Analytics Platform
7
Rendezvous
7
Activematrix Bpm
7
Silver Fabric Enabler
7
Ftl
7
Jaspersoft Reporting And Analytics
6
Ebx Add Ons
6
Activematrix Service Grid
6
Jaspersoft
6
Activematrix Service Bus
6
Ebx
6
Spotfire Deployment Kit
6
Administrator
5
Partnerexpress
4
Messaging Appliance
4
Java
4
Jasperreports Library
4
Enterprise Message Service
4
Enterprise Runtime For R
4
Nimbus
4
Spotfire Desktop Language Packs
4
Activematrix Businessworks
4
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-3207 | Unauthenticated attackers can gain unauthorized access to TIBCO BPM Enterprise 4.x through a misconfigured Java Management Extensions (JMX) interface, potentially allowing full system compromise. This vulnerability affects the availability, integrity, and confidentiality of affected systems with no patch currently available. | HIGH | 8.7 | 0.0% | 44 |
|
| CVE-2026-3912 | This is an injection vulnerability affecting TIBCO ActiveMatrix BusinessWorks and Enterprise Administrator due to insufficient validation and sanitization of user-supplied input. The vulnerability allows attackers to disclose sensitive information including local files and host system details, and may enable manipulation of application behavior. No CVSS score, EPSS data, or active exploitation reports are currently available, but the vendor has issued a security advisory indicating patches are available. | HIGH | 8.7 | 0.0% | 44 |
No patch
|