CVE-2025-2261: TIBCO BPM Enterprise XSS Vulnerability
Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2261?
CVE-2025-2261 is considered to be a high-severity stored XSS vulnerability that can compromise user security.
How do I fix CVE-2025-2261?
To fix CVE-2025-2261, update TIBCO ActiveMatrix Administrator and TIBCO BPM Enterprise to the latest patched versions provided by TIBCO.
What impact does CVE-2025-2261 have on affected software?
CVE-2025-2261 allows malicious data to execute in the context of a victim's browser, potentially leading to data theft or unauthorized actions.
Which TIBCO products are affected by CVE-2025-2261?
CVE-2025-2261 affects TIBCO ActiveMatrix Administrator and TIBCO BPM Enterprise.
Can CVE-2025-2261 be exploited remotely?
Yes, CVE-2025-2261 can be exploited remotely if the attacker injects malicious scripts into the web application.