Home

Description

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP request

PUBLISHED Reserved 2025-12-08 | Published 2026-01-09 | Updated 2026-01-09 | Assigner mitre

References

tim-doc.atlassian.net/...s/eng/pages/230981636/Release+Notes

www.y-security.de/...uite-tim-flow-multiple-vulnerabilities/

cve.org (CVE-2025-67278)

nvd.nist.gov (CVE-2025-67278)

Download JSON