CVE-2020-4792

IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

5.4 Medium

CVE-2020-4792 is a medium vulnerability (CVSS 5.4) in Aveva Edge, published April 5, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. No source names a fixed version.

IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189441.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.56%Down 4.5 points since Apr 14, 2021

What each source reports

CVE List Score used 5.4

Record: CVE-2020-4792
CVSS 3.0: 5.4 MediumCVSS:3.0/A:N/AV:N/AC:L/S:C/PR:L/C:L/UI:R/I:L/E:H/RC:C/RL:O
Updated: 2026-11-02

EUVDEUVD-2020-26039 5.4

Record: EUVD-2020-26039
CVSS 3.0: 5.4 MediumCVSS:3.0/A:N/AV:N/AC:L/S:C/PR:L/C:L/UI:R/I:L/E:H/RC:C/RL:O
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9ch6-prj4-mf5v No score

IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Record: GHSA-9ch6-prj4-mf5v
Weakness: CWE-79
Updated: 2026-11-02

NVD 5.4

Record: CVE-2020-4792
CVSS 3.1: 5.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-03	aliases, products, published	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD