IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Ibm |
|
No data.
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7259901 |
|
History
Tue, 17 Feb 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 17 Feb 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. | |
| Title | Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows | |
| First Time appeared |
Ibm
Ibm db2 Recovery Expert For Luw |
|
| Weaknesses | CWE-644 | |
| CPEs | cpe:2.3:a:ibm:db2_recovery_expert_for_luw:5.5:interim_fix_002:*:*:*:*:*:* | |
| Vendors & Products |
Ibm
Ibm db2 Recovery Expert For Luw |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-02-17T20:08:30.239Z
Reserved: 2025-03-10T17:14:03.090Z
Link: CVE-2025-27901
Vulnrichment
Updated: 2026-02-17T20:08:25.536Z
NVD
Status : Received
Published: 2026-02-17T20:22:02.370
Modified: 2026-02-17T20:22:02.370
Link: CVE-2025-27901
Redhat
No data.
OpenCVE Enrichment
No data.