PT-2026-20234 · Ibm · Db2 Recovery Expert For Luw+3
CVE-2025-27901
·
Publicado
2026-02-17
·
Atualizado
2026-02-25
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002
Description
IBM DB2 Recovery Expert for Linux, UNIX and Windows is susceptible to HTTP header injection due to insufficient input validation of the
HOST headers. This flaw potentially enables an attacker to execute various attacks against the system, including cross-site scripting, cache poisoning, or session hijacking.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Db2 Recovery Expert For Luw
Ibm Db2 Recovery Expert For Linux
Ibm Db2 Recovery Expert For Unix
Ibm Db2 Recovery Expert For Windows