CVE-2025-27902

Published: Ott 12, 2026 Last Modified: Ott 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: changed
Confidentiality: low
Integrity: low
Availability: none

Description

AI Translation Available

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser

1022

Use of Web Link to Untrusted Target with window.opener Access

Incomplete
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Alter Execution Logic
Applicable Platforms
Languages: Not Language-Specific, JavaScript
Technologies: Web Based, Web Server
Likelihood of Exploit: Medium
View CWE Details
https://www.ibm.com/support/pages/node/7290893
https://www.ibm.com/support/pages/node/7290893