HIGH 8.1 Microsoft
CVE-2025-59250
JDBC Driver for SQL Server Spoofing Vulnerability
Microsoft Security Update 2025-Oct: JDBC Driver for SQL Server Spoofing Vulnerability
Affected Products
- Microsoft JDBC Driver 12.4 for SQL Server
- Microsoft JDBC Driver 12.2 for SQL Server
- Microsoft JDBC Driver 12.8 for SQL Server
- Microsoft JDBC Driver 10.2 for SQL Server
- Microsoft JDBC Driver 11.2 for SQL Server
- Microsoft JDBC Driver 12.6 for SQL Server
- Microsoft JDBC Driver 13.2 for SQL Server
- Microsoft JDBC Driver 12.10 for SQL Server
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250
- https://nvd.nist.gov/vuln/detail/CVE-2025-59250
This high severity vulnerability with a CVSS score of 8.1 was published on 2025-10-14 via Microsoft. Affected: Microsoft JDBC Driver 12.4 for SQL Server, Microsoft JDBC Driver 12.2 for SQL Server, Microsoft JDBC Driver 12.8 for SQL Server and 5 more.
vulnfeed aggregates 11976 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.