EUVD-2025-211062

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser...

CVE-2025-27902

The software IBM Db2 Recovery Expert for Linux, Unix and Windows 5.5 IF 2 is vulnerable to an information disclosure vulnerability due to the use of a web link with untrusted references to an external site (CWE-1022 ). A remote attacker could exploit this flaw to expose sensitive information or p...

PT-2026-110892

Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description The software uses a web link containing untrusted references to an external site. This allows a remote attacker to potentially expose sensitive information or...

CVE-2025-33014

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the...

CVE-2024-39727

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser...