{"id":"CVE-2025-59250","aliases":["EUVD-2025-34375","GHSA-m494-w24q-6f7w","ROOT-APP-MAVEN-CVE-2025-59250"],"status":"published","title":"JDBC Driver for SQL Server Spoofing Vulnerability","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00735,"percentile":0.54882,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2025-10-14T17:00:42Z","modified":"2026-11-05T10:15:04Z","fixes":[{"ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","fixed_in":["11.2.4.jre11","12.2.1.jre11","12.6.5.jre11","12.8.2.jre11","12.10.2.jre11","13.2.1.jre11","10.2.4.jre11"],"sources":["ghsa","osv"]},{"ecosystem":"Root:Maven","package":"com.microsoft.sqlserver:mssql-jdbc","fixed_in":["9.4.1-aikido.1","12.10.1-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.microsoft.sqlserver:mssql-jdbc","fixed_in":["9.4.1-root.io.1","12.10.1-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0.jre11"},{"fixed":"11.2.4.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0.jre11"},{"fixed":"12.2.1.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.6.0.jre11"},{"fixed":"12.6.5.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.8.0.jre11"},{"fixed":"12.8.2.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.10.0.jre11"},{"fixed":"12.10.2.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.2.0.jre11"},{"fixed":"13.2.1.jre11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.0.jre11-preview"},{"fixed":"10.2.4.jre11"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.0.jre11-preview"},{"fixed":"10.2.4.jre11"}]}],"versions":["10.1.0.jre11-preview","10.1.0.jre17-preview","10.1.0.jre8-preview","10.2.0-SNAPSHOT.jre11-preview","10.2.0-SNAPSHOT.jre17-preview","10.2.0-SNAPSHOT.jre8-preview","10.2.0.jre11","10.2.0.jre17","10.2.0.jre8","10.2.1.jre11","10.2.1.jre17","10.2.1.jre8","10.2.2.jre11","10.2.2.jre11-preview","10.2.2.jre17","10.2.2.jre17-preview","10.2.2.jre8","10.2.2.jre8-preview","10.2.3.jre11","10.2.3.jre17","10.2.3.jre8","10.2.4.jre8","8.3.0.jre11-preview","8.3.0.jre14-preview","8.3.1.jre11-preview","8.3.1.jre14-preview","8.3.1.jre8-preview","8.4.0.jre11","8.4.0.jre14","8.4.0.jre8","8.4.1.jre11","8.4.1.jre14","8.4.1.jre8","9.1.0.jre11-preview","9.1.0.jre15-preview","9.1.0.jre8-preview","9.1.1.jre11-preview","9.1.1.jre15-preview","9.1.1.jre8-preview","9.2.0.jre11","9.2.0.jre15","9.2.0.jre8","9.2.1.jre11","9.2.1.jre15","9.2.1.jre8","9.3.0.jre11-preview","9.3.0.jre15-preview","9.3.0.jre8-preview","9.3.1.jre11-preview","9.3.1.jre15-preview","9.3.1.jre8-preview","9.4.0.jre11","9.4.0.jre16","9.4.0.jre8","9.4.1.jre11","9.4.1.jre11-preview","9.4.1.jre16","9.4.1.jre16-preview","9.4.1.jre8","9.4.1.jre8-preview","9.5.0-SNAPSHOT.jre11-preview","9.5.0-SNAPSHOT.jre17-preview","9.5.0-SNAPSHOT.jre8-preview","9.5.0.jre11-preview","9.5.0.jre17-preview","9.5.0.jre8-preview"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.2.0.jre11"},{"fixed":"11.2.4.jre11"}]}],"versions":["11.2.0.jre11","11.2.0.jre17","11.2.0.jre18","11.2.1.jre11","11.2.1.jre17","11.2.1.jre18","11.2.1.jre8","11.2.2.jre11","11.2.2.jre17","11.2.2.jre18","11.2.2.jre8","11.2.3.jre11","11.2.3.jre17","11.2.3.jre18","11.2.3.jre8","11.2.4.jre8"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.2.0.jre11"},{"fixed":"12.2.1.jre11"}]}],"versions":["12.2.0.jre11","12.2.1.jre8"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.6.0.jre11"},{"fixed":"12.6.5.jre11"}]}],"versions":["12.6.0.jre11","12.6.1.jre11","12.6.1.jre8","12.6.2.jre11","12.6.2.jre8","12.6.3.jre11","12.6.3.jre8","12.6.4.jre11","12.6.4.jre8","12.6.5.jre8"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.8.0.jre11"},{"fixed":"12.8.2.jre11"}]}],"versions":["12.8.0.jre11","12.8.1.jre11","12.8.1.jre8","12.8.2.jre8"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.10.0.jre11"},{"fixed":"12.10.2.jre11"}]}],"versions":["12.10.0.jre11","12.10.1.jre11","12.10.1.jre8","12.10.2.jre8"]},{"source":"osv","ecosystem":"Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13.2.0.jre11"},{"fixed":"13.2.1.jre11"}]}],"versions":["13.2.0.jre11","13.2.1.jre8"]},{"source":"osv","ecosystem":"Root:Maven","package":"com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-aikido.1"},{"fixed":"12.10.1-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.microsoft.sqlserver:mssql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.1-root.io.1"},{"fixed":"12.10.1-root.io.1"}]}]}],"products":[{"vendor":"microsoft","product":"jdbc_driver_for_sql_server"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 10.2"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 11.2"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 12.10"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 12.2"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 12.4"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 12.6"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 12.8"},{"vendor":"microsoft","product":"microsoft jdbc driver for sql server 13.2"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59250","tags":["vendor-advisory","patch","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59250","tags":["advisory"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2798","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2800","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2801","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2802","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2803","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/pull/2807","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md","tags":["web"]},{"url":"https://github.com/microsoft/mssql-jdbc/commit/9732e1bbc6ec44166fda2cddab31ce1c86c873dd#diff-45367b99a1951943bfecfc7765e80df687967aa56286a5b2e039f77cd9a0e118","tags":["web"]},{"url":"https://learn.microsoft.com/en-us/sql/connect/jdbc/microsoft-jdbc-driver-for-sql-server-support-matrix","tags":["web"]},{"url":"https://github.com/advisories/GHSA-m494-w24q-6f7w"},{"url":"https://github.com/microsoft/mssql-jdbc","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-59250","title":"JDBC Driver for SQL Server Spoofing Vulnerability","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T17:00:42.7Z","modified":"2026-02-26T17:47:15.996Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:47.812946Z"}],"euvd":[{"id":"EUVD-2025-34375","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T17:00:42Z","modified":"2026-02-26T17:47:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T19:48:23.405029Z"}],"ghsa":[{"id":"GHSA-m494-w24q-6f7w","title":"JDBC Driver for SQL Server has improper input validation issue","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T18:30:35Z","modified":"2026-08-21T03:22:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:41:04.755504Z"}],"nvd":[{"id":"CVE-2025-59250","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T17:16:07.24Z","modified":"2026-06-17T09:45:48.78Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:11:38.17237Z"}],"osv":[{"id":"CVE-2025-59250","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T17:16:07.24Z","modified":"2026-10-24T10:30:20.155652296Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:51.190588Z"},{"id":"GHSA-m494-w24q-6f7w","title":"JDBC Driver for SQL Server has improper input validation issue","description":"Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.","status":"published","published":"2025-10-14T18:30:35Z","modified":"2026-09-10T03:50:30.361235849Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:51.463834Z"},{"id":"ROOT-APP-MAVEN-CVE-2025-59250","title":"CVE-2025-59250 in com.microsoft.sqlserver:mssql-jdbc - Patched by Root","description":"Root has patched CVE-2025-59250 in the com.microsoft.sqlserver:mssql-jdbc package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-11-05T09:42:30Z","modified":"2026-11-05T10:15:04.370637772Z","updated_at":"2026-11-05T13:30:49.23793Z"}]}}