CVE-2025-27902CWE-1022

CVE-2025-27902

Medium · published October 13, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-1022 · Use of Web Link to Untrusted Target with window.opener Access
Published
2026-10-13T00:17Z
References (1)
https://www.ibm.com/support/pages/node/7290893 · [email protected]
EPSS history
Timeline
  • 14 OCT 03:24Z
    EPSS moved — → 0%
    epss
  • 12 OCT 19:04Z
    IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure
    cvelistv5
  • 12 OCT 19:04Z
    IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure
    cvelistv5