Medium · 6.5 CVE-2025-27904 EUVD-2025-207719GHSA-fwv6-g5vr-pgpx

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Published Feb 17, 2026 · Updated Feb 17, 2026 · Assigned by ibm

Vendor: IBM Product: DB2 Recovery Expert for LUW

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 Recovery Expert for LUW	5.5 Interim Fix 002	—

References

https://www.ibm.com/support/pages/node/7259901 vendor-advisory patch