| Package | Affected versions | Patched versions |
|---|---|---|
| com.microsoft.sqlserver:mssql-jdbc | ≥ 11.2.0.jre11, < 11.2.4.jre11≥ 12.10.0.jre11, < 12.10.2.jre11≥ 12.2.0.jre11, < 12.2.1.jre11≥ 12.6.0.jre11, < 12.6.5.jre11≥ 12.8.0.jre11, < 12.8.2.jre11≥ 13.2.0.jre11, < 13.2.1.jre11≥ 8.3.0.jre11-preview, < 10.2.4.jre11 | 11.2.4.jre1112.10.2.jre1112.2.1.jre1112.6.5.jre1112.8.2.jre1113.2.1.jre1110.2.4.jre11 |
| jdbc driver for sql server | ≥ 10.2.0, < 10.2.4≥ 11.2.0, < 11.2.4≥ 12.10.0, < 12.10.2≥ 12.2.0, < 12.2.1≥ 12.4.0, < 12.4.3≥ 12.6.0, < 12.6.5≥ 12.8.0, < 12.8.2≥ 13.2.0, < 13.2.1 | 10.2.411.2.412.10.212.2.112.4.312.6.512.8.213.2.1 |
Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free