VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 27, 2025· Updated Jun 17, 2026

CVE-2025-46578

CVE-2025-46578

Description

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

Affected products

4
  • Zte/Zxcloud Goldendb2 versions
    cpe:2.3:a:zte:zxcloud_goldendb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:zte:zxcloud_goldendb:*:*:*:*:*:*:*:*range: >=6.1.03,<6.1.03.11
    • cpe:2.3:a:zte:zxcloud_goldendb:7.2.01.01:-:*:*:-:*:*:*
  • GoldenDB/GoldenDBllm-fuzzy
  • Zte/GoldenDBcpe-rescue
    Range: 6.1.03

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.