CVE-2025-46577

EUVD-2025-12468
There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
zteCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
ztezxcloud_goldendb
6.1.03 ≤
𝑥
< 6.1.03.11
ztezxcloud_goldendb
7.2.01.01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601469