CVE-2025-67278
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jan 9, 2026
CISA due date
—
The record
An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP request
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|