Advisories · Technology

IBM DB2 Recovery Expert for LUW.

Every CVE that names IBM DB2 Recovery Expert for LUW among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-27898 CVE record

CVSS 6.3 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- Authentication bypass
Not analysed yet 17 Feb 2026
CVE-2025-27899 CVE record

CVSS 5.3 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- CWE-526
Not analysed yet 17 Feb 2026
CVE-2025-27900 CVE record

CVSS 6.8 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- Open redirect
Not analysed yet 17 Feb 2026
CVE-2025-27901 CVE record

CVSS 6.5 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- CWE-644
Not analysed yet 17 Feb 2026
CVE-2025-27903 CVE record

CVSS 5.9 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- Weak cryptography or TLS
Not analysed yet 17 Feb 2026
CVE-2025-27904 CVE record

CVSS 6.5 Medium

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- IBM DB2 Recovery Expert for LUW
- Cross-site request forgery (CSRF)
Not analysed yet 17 Feb 2026