CVE-2025-67278: Tim-Solutions Tim Flow

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP request

Affected products

• Tim-Solutions Tim Flow: before 9.1.2 (fixed in 9.1.2)

Published 2026-01-09. Last modified 2026-06-17.