Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-26657

Information Disclosure vulnerability in SAP KMC WPC

Description

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP KMC WPC

Default version status: unaffected

  • KMC-WPC 7.50affected

References