The vulnerability in Azure API Center exposes sensitive internal information to unauthorized actors, permitting disclosure of confidential configuration or other protected data across the network. This results in a loss of confidentiality and may enable attackers to gather information that could aid further attacks. The weakness is a classic information exposure flaw, aligned with CWE‑200.

Microsoft Azure API Center is the sole affected product. No version details are provided, so any deployment of Azure API Center may be vulnerable at the time of the advisory.

The CVSS score of 8.7 indicates a high severity rating. Exposure is over the network, implying that an attacker with network access to the API Center endpoints can exploit the flaw, though authentication requirements are not specified. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, meaning no known active exploitation has been reported yet. Nonetheless, the high CVSS warrants urgent attention.