Vulnerabilities > Tibco > Activematrix Businessworks Service Engine > Critical

DATE CVE VULNERABILITY TITLE RISK
2010-12-17 CVE-2010-4495 Remote Code Execution vulnerability in TIBCO ActiveMatrix Products
Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.
network
low complexity
tibco
critical
9.0
2010-10-26 CVE-2010-3491 Improper Input Validation vulnerability in Tibco products
The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.
network
low complexity
tibco CWE-20
critical
10.0