Beveiligingsadvies

CVE-2025-67280

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-09 00:00:00
Laatst bijgewerkt 2026-01-09 16:14:06
Toegewezen door mitre
CVSS-score 5.4
Status PUBLISHED

Beschrijving

In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged user to extract passwords of other users and access sensitive data of another user.