CVE-2025-3751 - CVE House

Status published High CVE-2025-3751

TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability

7 CVSS

Vulnerability Description

The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3751

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://community.tibco.com/advisories/tibco-security-advisory-may-13-2025-tibco-activematrix-businessworks-cve-2025-3751-r221/

More from TIBCO Software Inc

View All →

CVE-2025-2261

TIBCO BPM Enterprise XSS Vulnerability

High 7

CVE-2024-10218

TIBCO Hawk Stored-XEE Vulnerability

Critical 9.2

CVE-2024-10217

TIBCO Hawk Stored-XSS Vulnerability

Critical 9.2

Affected Vendor

TIBCO Software Inc

View all reports →

Affected Software

TIBCO ActiveMatrix BusinessWorks

Vulnerable Versions:

5.16.1

Timeline

Official Publish: May 21st, 2025

Last Modified: May 21st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1059 Command and Scripting Interpreter

Execution

T1213.006 Databases

Collection

T1485 Data Destruction

Impact