CVE-2020-4809

CVE-2020-4809 affects IBM Edge 4.2. The vulnerability is an information-disclosure issue where a user can read locally stored web pages created by IBM Edge, indicating a local-access impact and confidentiality breach. Root cause: IBM Edge’s handling/storage of web pages allows local retrieval by ...

CVE-2020-4941

CVE-2020-4941 affects IBM Edge 4.2 and is an information-disclosure vulnerability where error pages could reveal sensitive server version information, aiding targeted attacks. The IBM Security Bulletin confirms an Unexpected Content-Type vulnerability with a CVSSv3 base score of 4.3 (MEDIUM) and ...

CVE-2020-4792

CVE-2020-4792 affects IBM Edge 4.2. A cross-site scripting flaw in the Web UI lets an attacker embed arbitrary JavaScript, potentially altering functionality and exposing credentials within a trusted session. IBM’s bulletin notes the remediation: upgrade/fix via docker images deployed from Docker...

CVE-2020-4803

CVE-2020-4803 : IBM Edge 4.2 is affected by a cache-control information-disclosure vulnerability that allows locally stored web pages to be read by another user on the same system. The IBM advisory indicates affected product/version and a remediation consisting of a docker image upgrade pulled fr...

CVE-2020-4805

CVE-2020-4805 affects IBM Edge 4.2 and is described as a local information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. IBM’s bulletin confirms a cache-control vulnerability with a remediation: upgrade via a set of docker images pulle...

CVE-2025-1142

Summary: CVE-2025-1142 affects IBM Edge Application Manager 4.5. The Red Hat, NVD, and IBM bulletin entries corroborate a server-side request forgery (SSRF) vulnerability in IBM Edge Application Manager 4.5, enabling an authenticated attacker to issue unauthorized requests from the vulnerable sys...

CVE-2025-1139

CVE-2025-1139 affects IBM Edge Application Manager 4.5. A local user can read or modify resources due to incorrect permission assignment. Root cause: improper/incorrect permission provisioning. Impact: unauthorized access to resources on the device. Mitigation: upgrade to patched IBM Edge Applica...