CVE-2025-67279

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Jan 9, 2026

CISA due date

—

The record

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via the application stores password hashes in MD5 format

Affected packages

Ecosystem	Package	Introduced	Fixed