Three vulnerabilities in the platforms API Management Service could allow access sensitive data, mount further attacks, and even hijack developer portals.