CVE-2025-26657 — Information Disclosure vulnerability in SAP KMC WPC

CVE-2025-26657

Information Disclosure vulnerability in SAP KMC WPC PUBLISHED

Description (CNA)

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP KMC WPC	affected KMC-WPC 7.50

CWE

CWE-862

References

https://me.sap.com/notes/3568307
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.