Medium · 5.9 CVE-2025-27903 EUVD-2025-207718GHSA-fvpc-p8pv-qjmp

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Published Feb 17, 2026 · Updated Feb 17, 2026 · Assigned by ibm

Vendor: IBM Product: DB2 Recovery Expert for LUW

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 Recovery Expert for LUW	5.5 Interim Fix 002	—

References

https://www.ibm.com/support/pages/node/7259901 vendor-advisory patch