CVE-2025-46579
Last modified
CVE-2025-46579 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zte | Zxcloud Goldendb | >= 6.1.03, < 6.1.03.11 |
| Zte | Zxcloud Goldendb | 7.2.01.01 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-46579?
How severe is CVE-2025-46579?
How do I fix CVE-2025-46579?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-46573passport-wsfed-saml2 provides passport strategy for both WS-…8.6
- CVE-2025-46574There is an information disclosure vulnerability in the Gold…5.3
- CVE-2025-46575There is an information disclosure vulnerability in the Gold…7.5
- CVE-2025-46576There is a Permission Management and Access Control vulnerab…6.5
- CVE-2025-46577There is a SQL injection vulnerability in the GoldenDB datab…7.5
- CVE-2025-46578There are SQL injection vulnerabilities in multiple interfac…7.5
- CVE-2025-4658Versions of OpenPubkey library prior to 0.10.0 contained a …9.8
- CVE-2025-46580There is a code-related vulnerability in the GoldenDB databa…7.5
- CVE-2025-46581ZTE's ZXCDN product is affected by a Struts remote code exe…9.8
- CVE-2025-46582A private key disclosure vulnerability exists in ZTE's ZXMP …7.7
- CVE-2025-46583There is a Denial of Service（DoS）vulnerability in the ZTE MC…5.3
- CVE-2025-46584Vulnerability of improper authentication logic implementatio…5.5
Are you affected by CVE-2025-46579?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST