PatchTheCVEedge application manager vulnerabilities and fixes
Recent CVEs affecting edge application manager, with upgrade or downgrade steps. 2 tracked.
Also searched as: edgeapplicationmanager.
edge application manager has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-20. Highest priority: CVE-2025-1139 (score 22/100).
- CVE-2025-1142 MEDIUM 5.4 DOWNGRADE IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery (SSRF)
- CVE-2025-1139 MEDIUM 6.1 DOWNGRADE IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not hav
FAQ
How do I fix edge application manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edge application manager being exploited right now?
None of the tracked edge application manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edge application manager CVE should I patch first?
CVE-2025-1139 currently ranks highest (22/100): IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not hav.