Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

com.microsoft.sqlserver:mssql-jdbc

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.1MavenPublished

    JDBC Driver for SQL Server has improper input validation issue

    CVE-2025-59250 · GHSA-m494-w24q-6f7w

    Affected
    • Maven com.microsoft.sqlserver:mssql-jdbc >= 11.2.0.jre11, < 11.2.4.jre11; >= 12.2.0.jre11, < 12.2.1.jre11; >= 12.6.0.jre11, < 12.6.5.jre11; >= 12.8.0.jre11, < 12.8.2.jre11; >= 12.10.0.jre11, < 12.10.2.jre11; >= 13.2.0.jre11, < 13.2.1.jre11; >= 8.3.0.jre11-preview, < 10.2.4.jre11
    Fixed in
    12.2.1.jre1112.8.2.jre1110.2.4.jre1112.6.5.jre1111.2.4.jre1112.10.2.jre1113.2.1.jre11· Vendor fix available
    Issue
    Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

    Recommended action: Upgrade to 13.2.1.jre11, 12.10.2.jre11, 12.8.2.jre11 or 4 more by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →