Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 8.3.0.jre11-preview | 10.2.4.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 11.2.0.jre11 | 11.2.4.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 12.2.0.jre11 | 12.2.1.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 12.6.0.jre11 | 12.6.5.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 12.8.0.jre11 | 12.8.2.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 12.10.0.jre11 | 12.10.2.jre11 | N/A |
| com.microsoft.sqlserver:mssql-jdbc(Maven) | 13.2.0.jre11 | 13.2.1.jre11 | N/A |
CVSS Metrics
