Db2 Recovery Expert (Ibm) - vulnerabilities (CVEs)
14 CVEs, 4 in the last 30 days, 20 known versions, newest CVE from 2026-10-12. Vendor: Ibm.
CVEs of Db2 Recovery Expert
- CVE-2025-27895 - CVSS 6.1 (medium), 2026-10-12: IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to…
- CVE-2025-27896 - CVSS 6.1 (medium), 2026-10-12: IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to…
- CVE-2025-27897 - CVSS 6.1 (medium), 2026-10-12: IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to…
- CVE-2025-27902 - CVSS 6.1 (medium), 2026-10-12: IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit…
- CVE-2026-3856 - CVSS 9.1 (critical), 2026-03-17: IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying…
- CVE-2025-27900 - CVSS 6.8 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a…
- CVE-2025-27904 - CVSS 6.5 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which…
- CVE-2025-27899 - CVSS 5.3 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the…
- CVE-2025-27903 - CVSS 5.9 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel…
- CVE-2025-27901 - CVSS 6.5 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, caused by…
- CVE-2025-27898 - CVSS 6.3 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another…
- CVE-2013-4025 - CVSS 1.9 (low), 2013-09-25: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery…
- CVE-2013-4024 - CVSS 4.3 (medium), 2013-09-25: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery…
- CVE-2013-4022 - CVSS 3.5 (low), 2013-09-25: IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery…
