CVE-2025-27903 MEDIUM

CVE-2025-27903: Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Vendor Ibm

Product DB2 Recovery Expert for LUW

Weakness CWE-319 · Cleartext transmission

Published February 17, 2026

Last update February 17, 2026

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

Description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an attacker to obtain sensitive information using man in the middle techniques.

Key dates

Disclosure timeline

February 17, 2026 CVE published

February 17, 2026 Record updated