CVE-2019-0405

CVE-2019-0405 is an information disclosure vulnerability affecting SAP Enable Now versions prior to 1911. This flaw allows an unauthenticated attacker to enumerate valid user accounts by observing differences in application responses, thereby constructing a list of existing users. With a CVSS score of 7.5 (High), it presents a significant risk due to its low attack complexity and high impact on confidentiality. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has received some community discussion and media coverage, indicating awareness within the cybersecurity community.