8.1
High
CVE-2025-59250 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a…
Description
Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft JDBC Driver for SQL Server 12.4 1.0 | 1.0.0 → < 12.4.3 | 12.4.3 |
| Microsoft JDBC Driver for SQL Server 12.2 1.0 | 1.0.0 → < 12.2.1 | 12.2.1 |
| Microsoft JDBC Driver for SQL Server 12.8 1.0 | 1.0.0 → < 12.8.2 | 12.8.2 |
| Microsoft JDBC Driver for SQL Server 10.2 1.0 | 1.0.0 → < 10.2.4 | 10.2.4 |
| Microsoft JDBC Driver for SQL Server 11.2 1.0 | 1.0.0 → < 11.2.4 | 11.2.4 |
| Microsoft JDBC Driver for SQL Server 12.6 1.0 | 1.0.0 → < 12.6.5 | 12.6.5 |
| Microsoft JDBC Driver for SQL Server 13.2 1.0 | 1.0.0 → < 13.2.1 | 13.2.1 |
| Microsoft JDBC Driver for SQL Server 12.10 1.0 | 1.0.0 → < 12.10.2 | 12.10.2 |
References
- JDBC Driver for SQL Server Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified