CVE-2025-27904

6.5 mediumEPSS 0.1%

Medium (6.5) in ibm db2 recovery expert. EPSS 0.1% chance of exploitation in the next 30 days.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2026-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2_recovery_expert

References

https://www.ibm.com/support/pages/node/7259901

Check your stack JSON