IBM Edge Application Manager vulnerabilities

7 CVEs affecting IBM Edge Application Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-1142, published 2025-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4941, published 2021-09-23. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941.
CVE-2020-4792, published 2021-04-05. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2020-4809, published 2021-09-23. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633.
CVE-2020-4805, published 2021-09-23. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.
CVE-2020-4803, published 2021-09-23. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535.
CVE-2025-1142, published 2025-08-20. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to…
CVE-2025-1139, published 2025-08-20. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.