CVE-2025-26657

Publication date

2025-04-08 07:13:16

Family

sap

State

PUBLISHED

Description

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.