CVE-2025-27903

EUVD-2025-207718 · Published Feb 17, 2026

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication channel that could allow an attacker to obtain sensitive information using man in the middle techniques.

Technologies

Ibm Db2 Recovery Expert

Weaknesses

CWE-319

CVSS scores

v3.15.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Credential Access Discovery Collection

T1190Exploit Public-Facing Application T1040Network Sniffing T1056.004Credential API Hooking

References

https://www.ibm.com/support/pages/node/7259901

Potentially impacted assets

See if this affects your attack surface