VulnerabilityAnalyzed

CVE-2025-46574

There is an information disclosure vulnerability in the GoldenDB database product.

MEDIUM 5.3EPSS 0.23%

Does this matter?

Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.

Description

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.23% probability · 13th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: zte/zxcloud goldendb
Source: psirt@zte.com.cn

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/4693390139849392200Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.