CVE-2025-46578CWE-89

ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces

Medium · published April 27, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-04-27T01:30Z
EPSS history
Timeline
  • 27 APR 01:30Z
    ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces
    cvelistv5