Refine your search

4 vulnerabilities found for DB2 Recovery Expert for Linux, UNIX and Windows by IBM

CVE-2025-27895 (GCVE-0-2025-27895)
Vulnerability from cvelistv5
Published
2026-10-12 19:07
Modified
2026-10-12 22:53
Severity ?
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
Impacted products
Vendor Product Version
IBM DB2 Recovery Expert for Linux, UNIX and Windows Version: 5.5 IF 2
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27895",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-12T22:41:26.391737Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-12T22:53:58.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*"
          ],
          "product": "DB2 Recovery Expert for Linux, UNIX and Windows",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "5.5 IF 2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eIBM\u0026nbsp;\u003c/span\u003eDB2 Recovery Expert for Linux, UNIX and Windows\u003cspan\u003e\u0026nbsp;5.5 IF 2\u0026nbsp;\u003c/span\u003e\u003cspan\u003eis vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM\u00a0DB2 Recovery Expert for Linux, UNIX and Windows\u00a05.5 IF 2\u00a0is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T19:07:08.547Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290893"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now.\u003c/p\u003e\u003cp\u003eUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0\u003ca href=\"https://www.ibm.com/software/passportadvantage\" rel=\"nofollow\"\u003ePassport Advantage\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0 Passport Advantage https://www.ibm.com/software/passportadvantage"
        }
      ],
      "title": "DB2 Recovery Expert for Linux, UNIX and Windows Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-27895",
    "datePublished": "2026-10-12T19:07:08.547Z",
    "dateReserved": "2025-03-10T17:14:03.089Z",
    "dateUpdated": "2026-10-12T22:53:58.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27896 (GCVE-0-2025-27896)
Vulnerability from cvelistv5
Published
2026-10-12 19:06
Modified
2026-10-12 22:53
Severity ?
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
Impacted products
Vendor Product Version
IBM DB2 Recovery Expert for Linux, UNIX and Windows Version: 5.5 IF 2
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27896",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-12T22:41:19.227999Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-12T22:53:58.821Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*"
          ],
          "product": "DB2 Recovery Expert for Linux, UNIX and Windows",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "5.5 IF 2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eIBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 \u003c/span\u003e\u003cspan\u003eis vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T19:06:53.450Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290893"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now.\u003c/p\u003e\u003cp\u003eUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0\u003ca href=\"https://www.ibm.com/software/passportadvantage\" rel=\"nofollow\"\u003ePassport Advantage\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0 Passport Advantage https://www.ibm.com/software/passportadvantage"
        }
      ],
      "title": "IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-27896",
    "datePublished": "2026-10-12T19:06:53.450Z",
    "dateReserved": "2025-03-10T17:14:03.090Z",
    "dateUpdated": "2026-10-12T22:53:58.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27897 (GCVE-0-2025-27897)
Vulnerability from cvelistv5
Published
2026-10-12 19:05
Modified
2026-10-12 22:53
Severity ?
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
References
Impacted products
Vendor Product Version
IBM DB2 Recovery Expert for Linux, UNIX and Windows Version: 5.5 IF 2
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27897",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-12T22:41:12.226596Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-12T22:53:58.952Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*"
          ],
          "product": "DB2 Recovery Expert for Linux, UNIX and Windows",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "5.5 IF 2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eIBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 \u003c/span\u003e\u003cspan\u003eis vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T19:05:52.937Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290893"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now.\u003c/p\u003e\u003cp\u003eUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0\u003ca href=\"https://www.ibm.com/software/passportadvantage\" rel=\"nofollow\"\u003ePassport Advantage\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0 Passport Advantage https://www.ibm.com/software/passportadvantage"
        }
      ],
      "title": "IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-27897",
    "datePublished": "2026-10-12T19:05:52.937Z",
    "dateReserved": "2025-03-10T17:14:03.090Z",
    "dateUpdated": "2026-10-12T22:53:58.952Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-27902 (GCVE-0-2025-27902)
Vulnerability from cvelistv5
Published
2026-10-12 19:04
Modified
2026-10-12 22:53
Severity ?
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE
  • CWE-1022 - Use of Web Link to Untrusted Target with window.opener Access
Summary
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser
References
Impacted products
Vendor Product Version
IBM DB2 Recovery Expert for Linux, UNIX and Windows Version: 5.5 IF 2
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*
    cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27902",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-12T22:41:02.846878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-12T22:53:59.104Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:windows:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:linux:*:*",
            "cpe:2.3:a:ibm:db2_recovery_expert:5.5.0:if2:*:*:*:unix:*:*"
          ],
          "product": "DB2 Recovery Expert for Linux, UNIX and Windows",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "5.5 IF 2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM DB2 Recovery Expert for Linux, UNIX and Windows\u0026nbsp;5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims\u2019 web browser\u003c/p\u003e"
            }
          ],
          "value": "IBM DB2 Recovery Expert for Linux, UNIX and Windows\u00a05.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims\u2019 web browser"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1022",
              "description": "CWE-1022 Use of Web Link to Untrusted Target with window.opener Access",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T19:04:45.574Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290893"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now.\u003c/p\u003e\u003cp\u003eUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0\u003ca href=\"https://www.ibm.com/software/passportadvantage\" rel=\"nofollow\"\u003ePassport Advantage\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\nUpgrade to DB2 Recovery Expert for Linux, Unix and Windows v12.1 available on\u00a0 Passport Advantage https://www.ibm.com/software/passportadvantage"
        }
      ],
      "title": "IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-27902",
    "datePublished": "2026-10-12T19:04:45.574Z",
    "dateReserved": "2025-03-10T17:14:03.091Z",
    "dateUpdated": "2026-10-12T22:53:59.104Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}