{"id":"CVE-2012-0687","aliases":["EUVD-2012-0719","GHSA-gvqw-c58j-q64r"],"status":"published","title":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and...","description":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01281,"percentile":0.70204,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2012-03-13T10:00:00Z","modified":"2026-06-16T23:38:04Z","products":[{"vendor":"tibco","product":"activematrix_bpm"},{"vendor":"tibco","product":"activematrix_businessworks"},{"vendor":"tibco","product":"activematrix_businessworks_service_engine"},{"vendor":"tibco","product":"activematrix_service_bus"},{"vendor":"tibco","product":"activematrix_service_grid"},{"vendor":"tibco","product":"businessevents"},{"vendor":"tibco","product":"silver_fabric_activematrix_service_grid_distribution"}],"references":[{"url":"http://www.tibco.com/services/support/advisories/amx-be-spotfire-advisory_20120308.jsp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/businessworks_advisory_20120308_tcm8-15730.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/activematrix2_advisory_20120308_tcm8-15726.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/activematrix3_advisory_20120308_tcm8-15728.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.tibco.com/multimedia/businessevents_advisory_20120308_tcm8-15729.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0687"},{"url":"https://github.com/advisories/GHSA-gvqw-c58j-q64r"}],"sources":{"cve":[{"id":"CVE-2012-0687","description":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.","status":"published","published":"2012-03-13T10:00:00Z","modified":"2024-09-16T18:55:51.174Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0719","description":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.","status":"published","published":"2012-03-13T10:00:00Z","modified":"2024-09-16T18:55:51Z","updated_at":"2026-11-03T00:55:27.571827Z"}],"ghsa":[{"id":"GHSA-gvqw-c58j-q64r","title":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and...","description":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.","status":"published","published":"2022-05-17T05:31:28Z","modified":"2023-01-28T05:04:05Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:06.354686Z"}],"nvd":[{"id":"CVE-2012-0687","description":"TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus 3.x before 3.1.5, BusinessWorks Service Engine 5.9.x before 5.9.3, and BPM before 1.3.0; TIBCO BusinessEvents Runtime in Enterprise and Inference Editions 3.x before 3.0.3, Standard Edition 4.x before 4.0.2, and Standard Edition and Express 5.0.0; and TIBCO BusinessWorks Engine in TIBCO Silver Fabric ActiveMatrix BusinessWorks Distribution 5.9.2 and ActiveMatrix BusinessWorks before 5.9.3 allow remote attackers to obtain sensitive information via a crafted URL.","status":"published","published":"2012-03-13T10:55:01.01Z","modified":"2026-06-16T23:38:04.62Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:13.901526Z"}]}}