VDB
CESS-2025-26657
CESS-2025-26657
PUBLISHED
CVSS 5.3 MEDIUM
SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.
Risk Scores
CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Timeline
- Apr 8, 2025 CVE Published