CVE-2025-46578: ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces
There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46578?
The severity of CVE-2025-46578 is rated as high due to the potential for attackers to execute SQL injection and extract sensitive data.
How do I fix CVE-2025-46578?
To fix CVE-2025-46578, ensure that all input fields in the GoldenDB interfaces are properly sanitized and use prepared statements for database queries.
What are the potential impacts of CVE-2025-46578?
The potential impacts of CVE-2025-46578 include unauthorized access to sensitive database information and potential data manipulation.
Which versions of GoldenDB are affected by CVE-2025-46578?
CVE-2025-46578 affects all versions of the ZTE GoldenDB database product that have the identified SQL injection vulnerabilities.
How can I detect exploitation of CVE-2025-46578?
Exploitation of CVE-2025-46578 can be detected by monitoring database logs for unusual query patterns and unauthorized access attempts.