CVE-2025-46574CWE-20

ZTE GoldenDB Database product has an input validation vulnerability

Medium · published April 27, 2025

CVSS v3.1
4.1
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-04-27T01:07Z
EPSS history
Timeline
  • 27 APR 01:07Z
    ZTE GoldenDB Database product has an input validation vulnerability
    cvelistv5