CVE-2025-46579: high-severity vulnerability in ZTE GoldenDB
ZTE GoldenDB Database product has a DDE injection vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.4epss 0.3%
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
ZTE · GoldenDBRelated CVEs — ZTE GoldenDB
In the same product, most dangerous first.
CVE-2025-46580HIGHZTE GoldenDB Database product has a code-related vulnerabilityEPSS 0.4%CVE-2025-26702MEDIUMCVE-2025-26702EPSS 0.4%CVE-2025-46575MEDIUMZTE GoldenDB Database product has an information disclosure vulnerabilityEPSS 0.4%CVE-2025-46578MEDIUMZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfacesEPSS 0.4%CVE-2025-46577MEDIUMZTE GoldenDB Database product has an SQL injection vulnerabilityEPSS 0.4%CVE-2025-26705MEDIUMCVE-2025-26705EPSS 0.3%