JDBC Driver for SQL Server has improper input validation issue

🗓️ 14 Oct 2025 18:30:35Reported by GitHub Advisory DatabaseType

JDBC Driver for SQL Server has improper input validation enabling spoofing by unauthorized attacker.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to spoofing vulnerabilty in MSSQL JDBC driver (CVE-2025-59250)	17 Mar 202619:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9.	9 Dec 202508:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	11 Dec 202515:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Manage Component uses mssql-jdbc-12.8.1.jre11.jar dependency which is vulnerable to CVE-2025-59250.	17 Mar 202606:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	14 Apr 202615:53	–	ibm
Chainguard	CVE-2025-59250 vulnerabilities	5 Nov 202513:27	–	cgr
Circl	CVE-2025-59250	14 Oct 202516:38	–	circl
CNNVD	Microsoft JDBC Driver 输入验证错误漏洞	14 Oct 202500:00	–	cnnvd
Atlassian	Improper Input Validation in MSSQL JDBC driver in Crucible Server and Fisheye Server	3 Dec 202521:13	–	atlassian
CVE	CVE-2025-59250	14 Oct 202517:00	–	cve

Vulners

Node

com microsoft.sqlserver:mssql-jdbcRange8.3.0.jre11-preview–10.2.4.jre11maven

com microsoft.sqlserver:mssql-jdbcRange13.2.0.jre11–13.2.1.jre11maven

com microsoft.sqlserver:mssql-jdbcRange12.10.0.jre11–12.10.2.jre11maven

com microsoft.sqlserver:mssql-jdbcRange12.8.0.jre11–12.8.2.jre11maven

com microsoft.sqlserver:mssql-jdbcRange12.6.0.jre11–12.6.5.jre11maven

com microsoft.sqlserver:mssql-jdbcRange12.2.0.jre11–12.2.1.jre11maven

com microsoft.sqlserver:mssql-jdbcRange11.2.0.jre11–11.2.4.jre11maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-59250
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250
github	www.github.com/microsoft/mssql-jdbc/pull/2798
github	www.github.com/microsoft/mssql-jdbc/pull/2800
github	www.github.com/microsoft/mssql-jdbc/pull/2801
github	www.github.com/microsoft/mssql-jdbc/pull/2802
github	www.github.com/microsoft/mssql-jdbc/pull/2803
github	www.github.com/microsoft/mssql-jdbc/pull/2807
github	www.github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md
github	www.github.com/microsoft/mssql-jdbc/commit/9732e1bbc6ec44166fda2cddab31ce1c86c873dd

24 Nov 2025 17:38Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.1

EPSS0.00086

SSVC