High severity · published May 21, 2025
CVE-2025-3751
TIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability
7.0
CVSS
0.3%
EPSS
No
On KEV
Description
The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TA
TIBCO ActiveMatrix BusinessWorks · TIBCO Software Inc
5.16.1 before HF-01 · source: vendor
Affected product
TA
TIBCO ActiveMatrix BusinessWorks
TIBCO Software Inc
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3751
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3751
community.tibco.com
https://community.tibco.com/advisories/tibco-security-advisory-may-13-2025-tibco-activematrix-businessworks-cve-2025-3751-r221/
More from TIBCO ActiveMatrix BusinessWorks
7.5
CVE-2018-12408
TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability