PT-2026-20234

CVE-2025-27901

·

Published

2026-02-17

·

Updated

2026-02-25

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002
Description IBM DB2 Recovery Expert for Linux, UNIX and Windows is susceptible to HTTP header injection due to insufficient input validation of the HOST headers. This flaw potentially enables an attacker to execute various attacks against the system, including cross-site scripting, cache poisoning, or session hijacking.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax
Related identifiers
CVE-2025-27901
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com