CVE-2025-27898

EPSS 0.15%
Veröffentlicht 17.02.2026 20:22:01
Zuletzt bearbeitet 26.02.2026 16:33:33
Erkennungen
Login

Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an authenticated user to impersonate another user on the system.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Db2 Recovery Expert Version 5.5.0 Update interim_fix_002 SwPlatform linux

Ibm ≫ Db2 Recovery Expert Version 5.5.0 Update interim_fix_002 SwPlatform unix

Ibm ≫ Db2 Recovery Expert Version 5.5.0 Update interim_fix_002 SwPlatform windows

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.048

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	6.3	2.8	3.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-613 Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

https://www.ibm.com/support/pages/node/7259901

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-27898

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-27898

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27898

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-27898