A AegiFlow
HIGHCVSS 8.1EPSS 0.7%

CVE-2025-59250

JDBC Driver for SQL Server has improper input validation issue

Published
2025-10-14
Modified
2026-08-21
EPSS percentile
50%
Aliases
GHSA-m494-w24q-6f7w
Sources
github-advisory

Summary

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

Affected packages

EcosystemPackageAffected versionsFixed versions
Mavencom.microsoft.sqlserver:mssql-jdbc—11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11, 10.2.4.jre11

Remediation: Upgrade to 11.2.4.jre11 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.