Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Edge Application Manager
Total 7 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-1139 1 Ibm 1 Edge Application Manager 2025-09-03 N/A 6.1 MEDIUM
IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment.
CVE-2025-1142 1 Ibm 1 Edge Application Manager 2025-09-03 N/A 5.4 MEDIUM
IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2020-4941 1 Ibm 1 Edge Application Manager 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941.
CVE-2020-4809 1 Ibm 1 Edge Application Manager 2024-11-21 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633.
CVE-2020-4805 1 Ibm 1 Edge Application Manager 2024-11-21 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539.
CVE-2020-4803 1 Ibm 1 Edge Application Manager 2024-11-21 2.1 LOW 3.3 LOW
IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535.
CVE-2020-4792 1 Ibm 1 Edge Application Manager 2024-11-21 3.5 LOW 5.4 MEDIUM
IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189441.