Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-46578

ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces

Description

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE GoldenDB

Default version status: unaffected

  • 6.1.03 to ≤ 6.1.03.10affected
  • 7.2.01.01affected
  • Lite7.2.01.01affected

References