CVE-2025-46575: ZTE GoldenDB Database product has an information disclosure vulnerability
Published Apr 27, 2025
·Updated
There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.
Affected Software
5 affected components
ZTE GoldenDB
ZTE Zxcloud Goldendb=6.1.03.09
ZTE Zxcloud Goldendb=6.1.03.10
ZTE Zxcloud Goldendb=7.2.01.01
ZTE Zxcloud Goldendb=7.2.01.01
Remediation
Information
6.1.03.11,7.2.01.01P1,Lite7.2.01.01P1
Event History
Apr 27, 2025
CVE Published
via MITRE·01:12 AM
Data Sourced
via MITRE·01:12 AM
RemedyDescriptionSeverityWeakness
Oct 7, 57345
Event
via FIRST·11:21 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-46575?
CVE-2025-46575 is categorized with a significant severity level due to the potential for sensitive information leakage.
2
How do I fix CVE-2025-46575?
To fix CVE-2025-46575, it's recommended to apply the latest patches provided by ZTE for the GoldenDB database.
3
What systems are affected by CVE-2025-46575?
CVE-2025-46575 specifically affects the ZTE GoldenDB database product.
4
What kind of information can be disclosed in CVE-2025-46575?
CVE-2025-46575 can lead to the disclosure of sensitive information via exploited error messages.
5
Who can exploit CVE-2025-46575?
CVE-2025-46575 can potentially be exploited by attackers who can trigger error messages in the GoldenDB database.