PT-2026-20233 · Ibm · Db2 Recovery Expert For Luw

Published 2026-02-17 · Updated 2026-03-09 · CVE-2025-27900

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for LUW version 5.5 Interim Fix 002

Description The software contains a flaw that could enable a remote attacker to carry out phishing attacks through an open redirect. A crafted website can be used to exploit this issue, potentially spoofing the displayed URL and redirecting a user to a malicious website that appears trustworthy. This could allow an attacker to obtain sensitive information or launch further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-27900

Affected Products

Db2 Recovery Expert For Luw

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-27900 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27900 · Vendor Advisory
• https://twitter.com/CVEnew/status/2031137201770344519 · Twitter Post
• https://ibm.com/support/pages/node/7259901 · Patch, Vendor Advisory
• https://t.me/cveNotify/153350 · Telegram Post
• https://twitter.com/infoflowcloud/status/2031138314342760594 · Twitter Post