Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-8532 EUVD-2025-30288GHSA-3grp-7h7h-xcr6

IDOR in Bimser's eBA Document and Workflow Management System

Published Sep 19, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing.

This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166.

Affected products

VendorProductAffectedFixed
Bimser Solution Software Trade eBA Document and Workflow Management System 6.7.164 – < 6.7.166 6.7.166

References