CVE-2025-46578

high

Description

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392210

Details

Source: Mitre, NVD

Published: 2025-04-27

Updated: 2025-05-12

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N