VulnSocial

CVE-2025-27900Disclosure(ibm / db2_recovery_expert)

LOWCVSS 6.1 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch ibm db2_recovery_expert systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-601

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • db2_recovery_expert

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
ibm
Products
db2_recovery_expert

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-09: 2Patch / Workaround · 2026-03-09: 1Technical Details · 2026-03-09: 103-09
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-27900 IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim t… https://www.cve.org/CVERecord?id=CVE-2025-27900 ----- Traducción: CVE-2025-27900 IBM… http://infoflow.cloud`

    Post summary

    The passage announces CVE-2025-27900, indicating potential for phishing via an open redirect, but provides no PoC, exploit code, or mitigation information.

    0000095
    56 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2025-27900 IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim t… https://www.cve.org/CVERecord?id=CVE-2025-27900

    Post summary

    IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 addresses CVE‑2025‑27900, a flaw that allows remote attackers to conduct phishing via an open‑redirect vulnerability. The advisory announces the fix but provides no PoC or evidence of active exploitation.

    00000260
    56.6K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appibmdb2_recovery_expert5.5.0linux-
Appibmdb2_recovery_expert5.5.0unix-
Appibmdb2_recovery_expert5.5.0windows-

Explore more

Back to dashboardibm CVEsdb2_recovery_expert vulnerabilities