Security Bulletin: IBM Maximo Application Suite - Manage Component uses mssql-jdbc-12.8.1.jre11.jar dependency which is vulnerable to CVE-2025-59250.

Summary IBM Maximo Application Suite - Manage Component uses mssql-jdbc-12.8.1.jre11.jar dependency which is vulnerable to CVE-2025-59250. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-59250 DESCRIPTION: Improper input...

cn.crudapi:crudapi (>=0.0.1, <=0.0.5), com.alibaba.ververica:ververica-connector-jdbc (>=1.17-vvr-8.0.11-4, <=1.20-vvr-11.9.0-jdk11) +234 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=10.2.0.jre8, <=10.2.3.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =10.2.0.jre8, =0.0.1, =1.17-vvr-8.0.11-4, =2.9.5, =2.9.5, =2.8.12, =6.5.0, =1.0.0, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.7.30 and more Source cves: CVE-2025-59250 Source advisory: SNYK:JAVA-COMMICROSOFTSQLSERVER-13821835...

cl.kanopus.tool:ktool-deploy-sql (1.0.0), cl.kanopus.util:klib-deploy-sql (3.0.0) +109 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.10.0.jre11, <=12.10.2.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.10.0.jre11, =0.7.0, =0.7.0, =1.25.2, =4.4.4, =0.0.9, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59250 Source advisory: GHSA-M494-W24Q-6F7W...

africa.shuwari:doobie-sql-server_3 (0.1.0), be.ugent.idlab.knows:dataio (>=2.0.0, <=2.1.5) +162 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.6.0.jre11, <=12.6.4.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.6.0.jre11, =2.0.0, =1.7.0-beta1, =1.7.0-beta1, =1.2.0, =1.2.0, =1.2.0, =2.8.24, =0.6.1, =1.17.0, =4.0.4, =4.0.4, =0.9.0, =0.11.0 and more Source cves: CVE-2025-59250 Source advisory: OSV:GHSA-M494-W24Q-6F7W...

bio.ferlab:datalake-spark30_2.12 (0.2.39), bio.ferlab:datalake-spark31_2.12 (>=0.1.17, <=0.2.46) +519 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=8.4.0.jre8, <=10.2.3.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =8.4.0.jre8, =0.1.17, =0.2.47, =5.4.1, =5.6.5, =6.6.0, =6.6.0, =1.1.9, =1.3.29.8, =1.3.30, =0.0.1, =1.0.0, =1.0.35, =1.035 and more Source cves: CVE-2025-59250 Source advisory: OSV:GHSA-M494-W24Q-6F7W...

be.ugent.idlab.knows:dataio (>=1.2.0, <=1.3.1), com.arassec.igor:igor-plugin-data (>=0.6.5, <=0.6.8) +130 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=11.1.1.jre8-preview, <=11.2.3.jre17)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =11.1.1.jre8-preview, =1.2.0, =0.6.5, =0.6.5, =0.6.5, =9.0.0-alpha.25, =9.0.0, =0.0.5, =0.0.5, =0.0.8 and more Source cves: CVE-2025-59250 Source advisory: MEND:CVE-2025-59250...

cl.kanopus.tool:ktool-deploy-sql (1.0.0), cl.kanopus.util:klib-deploy-sql (3.0.0) +119 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.9.0.jre11-preview, <=12.10.2.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.9.0.jre11-preview, =0.7.0, =0.7.0, =1.24.0, =4.4.4, =0.0.9, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59250 Source advisory: MEND:CVE-2025-59250...

CVE-2025-59250

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-04-28 16:34:47+00:00| seen|...

KLA89272 SUI vulnerability in Microsoft SQL Server

A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface, bypass security restrictions. Original advisories CVE-2025-59250 Exploitation Related products Microsoft-SQL-Server CVE list CVE-2025-59250 critical Solution Install...