Data Transmission Vulnerability in IBM DB2 Recovery Expert for Linux, UNIX and Windows
CVE-2025-27903

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Db2 Recovery Expert For Luw
Vendor
CVE Published:
17 February 2026

What is CVE-2025-27903?

IBM DB2 Recovery Expert for Linux, UNIX, and Windows has a vulnerability that transmits data over a cleartext communication channel. This lack of encryption could enable attackers to exploit man-in-the-middle techniques, potentially compromising sensitive information. Users are encouraged to review their security measures and consider the available patches to mitigate this risk.

Affected Version(s)

DB2 Recovery Expert for LUW 5.5 Interim Fix 002

References

https://www.ibm.com/support/pages/node/7259901
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.