CVE-2025-67279: Tim-Solutions Tim Flow

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via the application stores password hashes in MD5 format

Affected products

• Tim-Solutions Tim Flow: before 9.1.2 (fixed in 9.1.2)

Published 2026-01-09. Last modified 2026-06-17.