Vulnerabilities

TI-2025-43899 CVE-2025-27895 · GHSA-4vq9-4vc4-5q8h

Cross-site scripting in IBM DB2 Recovery Expert

LOW 26

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00162 Published 2026-10-12 No fix listed CWE-79

TI-2025-43900 CVE-2025-27896 · GHSA-x9cv-h294-g58f

LOW 26

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00162 Published 2026-10-12 No fix listed CWE-79

TI-2025-43901 CVE-2025-27897 · GHSA-8gcf-345p-qgh4

LOW 26

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00162 Published 2026-10-12 No fix listed CWE-79

TI-2025-43902 CVE-2025-27902 · GHSA-53cf-cjq2-f8cj

LOW 26

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00183 Published 2026-10-12 No fix listed CWE-1022