CVE-2025-27895, CVE-2025-27896 and CVE-2025-27897 are unauthenticated cross-site scripting flaws in IBM DB2 Recovery Expert for Linux, UNIX and Windows. Version 5.5 IF 2 is affected. No exploitation is confirmed. IBM fixes all three in version 12.1. https://www.cve.org/CVERecord?id=CVE-2025-27895 #Linux #Windows #infosec #cybersecurity