CVE-2025-67279

概要

参考情報

• tim-doc.atlassian.net/wiki/spaces/eng/pages/230981636/Release+Notes · Release Notes
• y-security.de/news-en/tim-bpm-suite-tim-flow-multiple-vulnerabilities · Third Party Advisory

tim flow のその他の脆弱性

• CVE-2025-67282中 5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Authorization Bypass vulnerabilities exists which allow a low privileged user to download …
• CVE-2025-67281中 5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple SQL injection vulnerabilities exists which allow a low privileged and administrative user …
• CVE-2025-67280中 5.4In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user…
• CVE-2025-67278中 6.5An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP req…