CyberICT

CVE-2025-59250

Microsoft · Published October 14, 2025

CVSS v3.1

HIGH
Patch availableGet patch

Description

JDBC Driver for SQL Server Spoofing Vulnerability. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

Affected Products

  • Microsoft JDBC Driver 12.4 for SQL Server
  • Microsoft JDBC Driver 12.2 for SQL Server
  • Microsoft JDBC Driver 12.8 for SQL Server
  • Microsoft JDBC Driver 10.2 for SQL Server

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C