CVE-2025-27899 MEDIUM

CVE-2025-27899: Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Vendor Ibm

Product DB2 Recovery Expert for LUW

Weakness CWE-526

Published February 17, 2026

Last update March 6, 2026

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that could aid in further attacks against the system.

Key dates

Disclosure timeline

February 17, 2026 CVE published

March 6, 2026 Record updated