CVE-2025-46575

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-209

Affected software

Vendor	Product	Versions
ZTE	GoldenDB	>= 6.1.03.09, <= 6.1.03.10; 7.2.01.01; Lite7.2.01.01

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392205Vendor Advisory

Timeline

Published: Apr 27, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-465766.5There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to byp CVE-2025-465777.5There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.CVE-2025-465787.5There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to i CVE-2025-465797.8There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and whe CVE-2025-46589.8Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verif CVE-2025-465807.5There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation o CVE-2025-465819.8ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute com CVE-2025-465827.7A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the CVE-2025-465835.3There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the CVE-2025-465845.5Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerabilit CVE-2025-465857.0Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availabil CVE-2025-465865.5Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.