CVE-2025-46578

7.5 highEPSS 0.4%

High (7.5) in zte zxcloud goldendb. EPSS 0.4% chance of exploitation in the next 30 days.

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-11-01)
CWE: CWE-89
Published: 2025-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:zxcloud_goldendb

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392210

Check your stack JSON