Spoofing

🗓️ 13 Dec 2025 05:00:09Reported by Veracode Vulnerability DatabaseType

Microsoft Java database connectivity driver is vulnerable to spoofing due to input validation flaws.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to spoofing vulnerabilty in MSSQL JDBC driver (CVE-2025-59250)	17 Mar 202619:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9.	9 Dec 202508:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	11 Dec 202515:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Manage Component uses mssql-jdbc-12.8.1.jre11.jar dependency which is vulnerable to CVE-2025-59250.	17 Mar 202606:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	14 Apr 202615:53	–	ibm
Chainguard	CVE-2025-59250 vulnerabilities	5 Nov 202513:27	–	cgr
Circl	CVE-2025-59250	14 Oct 202516:38	–	circl
CNNVD	Microsoft JDBC Driver 输入验证错误漏洞	14 Oct 202500:00	–	cnnvd
Atlassian	Improper Input Validation in MSSQL JDBC driver in Crucible Server and Fisheye Server	3 Dec 202521:13	–	atlassian
CVE	CVE-2025-59250	14 Oct 202517:00	–	cve

Vulners

Node

microsoft mssql-jdbcRange8.3.0.jre11-preview–10.2.4.jre8java

microsoft mssql-jdbcRange13.2.0.jre11–13.2.1.jre8java

microsoft mssql-jdbcRange12.10.0.jre11–12.10.2.jre8java

microsoft mssql-jdbcRange12.8.0.jre11–12.8.2.jre8java

microsoft mssql-jdbcRange12.6.0.jre11–12.6.5.jre8java

microsoft mssql-jdbcRange12.2.0.jre11–12.2.1.jre8java

microsoft mssql-jdbcRange11.2.0.jre11–11.2.4.jre8java

Source	Link
github	www.github.com/microsoft/mssql-jdbc/pull/2801
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250
github	www.github.com/microsoft/mssql-jdbc/pull/2802
advisories	www.advisories.gitlab.com/pkg/maven/com.microsoft.sqlserver/mssql-jdbc/CVE-2025-59250/
github	www.github.com/microsoft/mssql-jdbc/pull/2798
github	www.github.com/microsoft/mssql-jdbc/pull/2803
github	www.github.com/microsoft/mssql-jdbc/pull/2807
github	www.github.com/microsoft/mssql-jdbc/pull/2800
github	www.github.com/advisories/GHSA-m494-w24q-6f7w

15 Jan 2026 15:42Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.1

EPSS0.00086

SSVC