CVE-2025-27902 — IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure

CVE-2025-27902

IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure PUBLISHED

Description (CNA)

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser

Affected (CNA)

Vendor / product	Versions
IBM / DB2 Recovery Expert for Linux, UNIX and Windows	affected 5.5 IF 2

CWE

CWE-1022

References

https://www.ibm.com/support/pages/node/7290893

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.