Vulnerability Database

309,540

Total vulnerabilities in the database

CVE-2025-46579

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

  • Published: Apr 27, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-46579
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.4
  • AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
zte / zxcloud_goldendb 6.1.03 6.1.03.11
zte / zxcloud_goldendb 7.2.01.01 7.2.01.01.x