What’s Vulnerable › Vulnerabilities

CVE-2014-5286

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-02-19 · updated 2026-06-17
• Weakness: CWE-264

Description

The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before 1.2.1 for WCF, and ActiveMatrix Management Agent 1.x before 1.2.1 for WebSphere allows remote attackers to gain privileges and obtain sensitive information via unspecified vectors.

Affected products

• TIBCO Activematrix Management Agent: 1.0.0, 1.1.0, 1.2.0
• TIBCO Activematrix Policy Agent: 3.0.0, 3.1.0, 3.1.1
• TIBCO Activematrix Policy Manager: 3.0.0, 3.1.0, 3.1.1

References

• http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt
• http://www.tibco.com/mk/advisory.jsp
• http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218
• http://www.tibco.com/assets/blt1b18947cad32d1c4/2014-007-advisory.txt
• http://www.tibco.com/mk/advisory.jsp
• http://www.tibco.com/services/support/advisories/activematrix-advisory_20150218

Get alerted when CVE-2014-5286 or the next vulnerability affects your stack