Db2 Recovery Expert For Luw (Ibm) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-02-17. Vendor: Ibm.

CVEs of Db2 Recovery Expert For Luw

• CVE-2025-27900 - CVSS 6.8 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a…
• CVE-2025-27904 - CVSS 6.5 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which…
• CVE-2025-27899 - CVSS 5.3 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the…
• CVE-2025-27903 - CVSS 5.9 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel…
• CVE-2025-27901 - CVSS 6.5 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, caused by…
• CVE-2025-27898 - CVSS 6.3 (medium), 2026-02-17: IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another…