PT-2026-20233 · Ibm · Db2 Recovery Expert For Luw

Publicado 2026-02-17 · Atualizado 2026-03-09 · CVE-2025-27900

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for LUW version 5.5 Interim Fix 002

Description The software contains a flaw that could enable a remote attacker to carry out phishing attacks through an open redirect. A crafted website can be used to exploit this issue, potentially spoofing the displayed URL and redirecting a user to a malicious website that appears trustworthy. This could allow an attacker to obtain sensitive information or launch further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2025-27900

Produtos afetados

Db2 Recovery Expert For Luw

Referências · 6

• https://twitter.com/CVEnew/status/2031137201770344519 · Publicação no Twitter
• https://ibm.com/support/pages/node/7259901 · Correção, Aviso do Fabricante
• https://t.me/cveNotify/153350 · Publicação no Telegram
• https://twitter.com/infoflowcloud/status/2031138314342760594 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-27900 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-27900 · Aviso do Fabricante