CVE-2021-34707: medium-severity vulnerability in Cisco Evolved Programmable Network Manager…
Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.1%
A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco Evolved Programmable Network Manager (EPNM)Related CVEs — Cisco Evolved Programmable Network Manager…
In the same product, most dangerous first.
CVE-2022-20656MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 1.7%CVE-2023-20271MEDIUMCVE-2023-20271EPSS 0.5%CVE-2022-20657MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting VulnerabilityEPSS 0.5%CVE-2023-20222MEDIUMCVE-2023-20222EPSS 0.5%CVE-2025-20269MEDIUMCisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2023-20203—CVE-2023-20203EPSS 0.4%