CVE-2025-46579

7.8 highEPSS 0.3%

High (7.8) in zte zxcloud goldendb. EPSS 0.3% chance of exploitation in the next 30 days.

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:zxcloud_goldendb

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601474

Check your stack JSON