CVE-2025-26657
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 8, 2025
CWE ID 862
Summary
CVE-2025-26657 is a vulnerability affecting SAP KMC WPC. An attacker can exploit this issue through a parameter query, gaining unauthenticated access to retrieve usernames. While this does not directly compromise the application's integrity or availability, it poses a low impact risk to the confidentiality of the system by exposing sensitive user information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.