CVE-2025-46578
HIGHCVSS 7.5/10EPSS 0.29%
Last modified
CVE-2025-46578 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zte | Zxcloud Goldendb | >= 6.1.03, < 6.1.03.11 |
| Zte | Zxcloud Goldendb | 7.2.01.01 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-46578?
There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.
How severe is CVE-2025-46578?
CVE-2025-46578 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.29% probability of exploitation in the next 30 days.
How do I fix CVE-2025-46578?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-46572passport-wsfed-saml2 provides passport strategy for both WS-…9.3
- CVE-2025-46573passport-wsfed-saml2 provides passport strategy for both WS-…8.6
- CVE-2025-46574There is an information disclosure vulnerability in the Gold…5.3
- CVE-2025-46575There is an information disclosure vulnerability in the Gold…7.5
- CVE-2025-46576There is a Permission Management and Access Control vulnerab…6.5
- CVE-2025-46577There is a SQL injection vulnerability in the GoldenDB datab…7.5
- CVE-2025-46579There is a DDE injection vulnerability in the GoldenDB datab…7.8
- CVE-2025-4658Versions of OpenPubkey library prior to 0.10.0 contained a …9.8
- CVE-2025-46580There is a code-related vulnerability in the GoldenDB databa…7.5
- CVE-2025-46581ZTE's ZXCDN product is affected by a Struts remote code exe…9.8
- CVE-2025-46582A private key disclosure vulnerability exists in ZTE's ZXMP …7.7
- CVE-2025-46583There is a Denial of Service（DoS）vulnerability in the ZTE MC…5.3
Are you affected by CVE-2025-46578?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST