CVE-2025-3751

The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information

CVSS

No CVSS.

References

Link	Resource
https://community.tibco.com/advisories/tibco-security-advisory-may-13-2025-tibco-activematrix-businessworks-cve-2025-3751-r221/

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) El componente mencionado anteriormente contiene una vulnerabilidad que un atacante puede explotar para realizar un ataque de inyección SQL. Esto podría provocar acceso no autorizado a la base de datos y la exposición de información confidencial.

21 May 2025, 19:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-21 19:16

Updated : 2026-06-17 09:20

NVD link : CVE-2025-3751

Mitre link : CVE-2025-3751

CVE.ORG link : CVE-2025-3751

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2025-3751", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-3751", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-21T19:47:30.311785Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@tibco.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@tibco.com", "affectedData": [{"vendor": "TIBCO Software Inc", "modules": ["TIBCO Administrator"], "product": "TIBCO ActiveMatrix BusinessWorks", "versions": [{"status": "affected", "version": "5.16.1", "lessThan": "HF-01", "versionType": "Patch"}], "defaultStatus": "unaffected"}]}], "published": "2025-05-21T19:16:08.590", "references": [{"url": "https://community.tibco.com/advisories/tibco-security-advisory-may-13-2025-tibco-activematrix-businessworks-cve-2025-3751-r221/", "source": "security@tibco.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@tibco.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "The component listed above contains a vulnerability that can be exploited by an attacker to perform a SQL Injection attack. This could lead to unauthorised access to the database and exposure of sensitive information"}, {"lang": "es", "value": "El componente mencionado anteriormente contiene una vulnerabilidad que un atacante puede explotar para realizar un ataque de inyecci\u00f3n SQL. Esto podr\u00eda provocar acceso no autorizado a la base de datos y la exposici\u00f3n de informaci\u00f3n confidencial."}], "lastModified": "2026-06-17T09:20:36.330", "sourceIdentifier": "security@tibco.com"}