CVE-2025-59250HighCVSS 8.1
JDBC Driver for SQL Server Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.
🎯 Affected products8
- Microsoft JDBC Driver 10.2 for SQL Server
- Microsoft JDBC Driver 11.2 for SQL Server
- Microsoft JDBC Driver 12.10 for SQL Server
- Microsoft JDBC Driver 12.2 for SQL Server
- Microsoft JDBC Driver 12.4 for SQL Server
- Microsoft JDBC Driver 12.6 for SQL Server
- Microsoft JDBC Driver 12.8 for SQL Server
- Microsoft JDBC Driver 13.2 for SQL Server
✅ Remediation
KBRelease Notes (Security Update) — fixed build 12.4.3 KBRelease Notes (Security Update) — fixed build 12.2.1 KBRelease Notes (Security Update) — fixed build 12.8.2 KBRelease Notes (Security Update) — fixed build 10.2.4 KBRelease Notes (Security Update) — fixed build 11.2.4 KBRelease Notes (Security Update) — fixed build 12.6.5 KBRelease Notes (Security Update) — fixed build 13.2.1 KBRelease Notes (Security Update) — fixed build 12.10.2
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#124
- referencehttps://learn.microsoft.com/en-us/sql/connect/jdbc/release-notes-for-the-jdbc-driver?view=sql-server-ver16
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#122
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#128
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#102
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#112
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#126
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#132
- patchhttps://learn.microsoft.com/sql/connect/jdbc/release-notes-for-the-jdbc-driver#1210