CVE-2025-27903: IBM DB2 Recovery Expert

Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected products

• IBM DB2 Recovery Expert: version 5.5.0 only

Published 2026-02-17. Last modified 2026-06-17.