Is CVE-2025-27902 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-27902?

CVE-2025-27902 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2025-27902

Description

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser