CVE-2025-27899

5.3 mediumEPSS 0.2%

Medium (5.3) in ibm db2 recovery expert. EPSS 0.2% chance of exploitation in the next 30 days.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-526
Published: 2026-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2_recovery_expert

References

https://www.ibm.com/support/pages/node/7259901

Check your stack JSON