CVE-2021-34707: fallo de gravedad media en Cisco Evolved Programmable Network Manager…
Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 1.1%
A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Cisco · Cisco Evolved Programmable Network Manager (EPNM)CVEs relacionadas — Cisco Evolved Programmable Network Manager…
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-20656MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 1.7%CVE-2023-20271MEDIUMCVE-2023-20271EPSS 0.5%CVE-2022-20657MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting VulnerabilityEPSS 0.5%CVE-2023-20222MEDIUMCVE-2023-20222EPSS 0.5%CVE-2025-20269MEDIUMCisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download VulnerabilityEPSS 0.4%CVE-2023-20203—CVE-2023-20203EPSS 0.4%