Vulnerability in N/a

CVE-2025-67807

The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behaviour in newer…

EPSS: 0.000 (9.9th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References