CVE-2012-0687

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-03-13 · updated 2026-06-16
Weakness: CWE-200

Description

TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.

Affected products

TIBCO Activematrix Bpm: through 1.2.0; 1.0.1, 1.0.2, 1.1.0, 1.1.1
TIBCO Software Inc. TIBCO ActiveMatrix BusinessWorks: through 5.9.2
TIBCO Activematrix Businessworks Service Engine: through 5.8.1; 5.6.0, 5.6.3, 5.6.4, 5.7, 5.7.1, 5.7.2 (+4)
TIBCO Activematrix Service Bus: 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1 (+4)
TIBCO Activematrix Service Grid: 2.0.0, 2.0.1, 2.1.0, 2.2.0, 2.2.1, 2.3.0 (+6)
TIBCO Businessevents: 3.0, 3.0.1, 3.0.2, 4.0, 4.0.1, 5.0
TIBCO Silver Fabric Activematrix Service Grid Distribution: 3.1.3, 5.9.2

References

Get alerted when CVE-2012-0687 or the next vulnerability affects your stack