Vulnerabilities

TI-2025-29293 CVE-2025-46580 · GHSA-c425-5wcj-96rq

ZTE GoldenDB Database product has a code-related vulnerability

LOW 34

There is a code-related vulnerability in the GoldenDB database product.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00403 Published 2025-04-27 No fix listed CWE-400

TI-2025-29292 CVE-2025-46579 · GHSA-8x47-7hq5-rq2m

LOW 38

There is a DDE injection vulnerability in the GoldenDB database product.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00323 Published 2025-04-27 No fix listed CWE-94

TI-2025-29291 CVE-2025-46578 · GHSA-2777-r7v2-pxc5

LOW 33

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2025-04-27 No fix listed CWE-89

TI-2025-29290 CVE-2025-46577 · GHSA-6244-25gg-jx8v

LOW 33

There is a SQL injection vulnerability in the GoldenDB database product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2025-04-27 No fix listed CWE-89

TI-2025-29289 CVE-2025-46576 · GHSA-g86j-gmgg-2qh2

LOW 29

There is a Permission Management and Access Control vulnerability in the GoldenDB database product.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00291 Published 2025-04-27 Fixed in 7.2.01.01 CWE-269

TI-2025-29288 CVE-2025-46575 · GHSA-x5pj-xm5h-5mgv

LOW 33

There is an information disclosure vulnerability in the GoldenDB database product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00382 Published 2025-04-27 No fix listed CWE-209

TI-2025-29287 CVE-2025-46574 · GHSA-mr49-cw5j-jwxr

LOW 24

There is an information disclosure vulnerability in the GoldenDB database product.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2025-04-27 No fix listed CWE-20