CVE-2021-34707

MEDIUM

Cisco Evolved Programmable Network Manager < 5.0 - Authenticated Sensitive Information Exposure via REST API

Title source: llm
STIX 2.1

Description

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0024
EPSS Percentile 46.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
cisco/evolved_programmable_network_manager < 5.0
Published Aug 04, 2021
Tracked Since Feb 18, 2026