CVE-2025-27904: IBM DB2 Recovery Expert

Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

• IBM DB2 Recovery Expert: version 5.5.0 only

Published 2026-02-17. Last modified 2026-06-17.