CVE-2025-46574 MEDIUM

CVE-2025-46574: ZTE GoldenDB Database product has an input validation vulnerability

Vendor Zte
Product GoldenDB
Weakness CWE-20 · Input validation
Published April 27, 2025
Last update April 28, 2025
View on NVD All CVEs

CVSS base score

4.1/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

Key dates

02Disclosure timeline

April 27, 2025 CVE published
April 28, 2025 Record updated