Is CVE-2025-27895 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-27895?

CVE-2025-27895 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2025-27895

Description

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.