CVE-2025-27904CWE-352

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Medium · published February 17, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-02-17T19:30Z
EPSS history
Timeline
  • 17 FEB 19:30Z
    Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
    cvelistv5