CVE-2025-46575CWE-209

ZTE GoldenDB Database product has an information disclosure vulnerability

Medium · published April 27, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2025-04-27T01:12Z
EPSS history
Timeline
  • 27 APR 01:12Z
    ZTE GoldenDB Database product has an information disclosure vulnerability
    cvelistv5