CVE-2025-27902

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser

Score
CVSS 3.1 6.1 Medium
Status
Awaiting Analysis - psirt@us.ibm.com
Published
2026-10-12
Last modified
2026-10-24
Weaknesses
CWE-1022

Affected products

References

 
 
© AVABIS GmbH privacypolicy about