Security Advisory

CVE-2025-26657

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-08 07:13:16
Last updated 2025-04-08 14:50:40
Assigner sap
CVSS score 5.3
State PUBLISHED

Description

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.