{"id":"CVE-2025-46579","aliases":["EUVD-2025-12467","GHSA-8x47-7hq5-rq2m"],"status":"published","title":"ZTE GoldenDB Database product has a DDE injection vulnerability","description":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00323,"percentile":0.25659,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2025-04-27T01:34:35Z","modified":"2026-06-17T09:26:39Z","products":[{"vendor":"zte","product":"goldendb"},{"vendor":"zte","product":"zxcloud_goldendb"}],"references":[{"url":"https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1036467615091601474","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46579"},{"url":"https://github.com/advisories/GHSA-8x47-7hq5-rq2m"}],"sources":{"cve":[{"id":"CVE-2025-46579","title":"ZTE GoldenDB Database product has a DDE injection vulnerability","description":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.","status":"published","published":"2025-04-27T01:34:35.034Z","modified":"2025-04-28T15:33:46.289Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:36.385228Z"}],"euvd":[{"id":"EUVD-2025-12467","description":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.","status":"published","published":"2025-04-27T01:34:35Z","modified":"2025-04-28T15:33:46Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:02.061871Z"}],"ghsa":[{"id":"GHSA-8x47-7hq5-rq2m","title":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE...","description":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.","status":"published","published":"2025-04-27T03:30:23Z","modified":"2025-04-27T03:30:34Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:02:02.838203Z"}],"nvd":[{"id":"CVE-2025-46579","description":"There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.","status":"published","published":"2025-04-27T02:15:16.203Z","modified":"2026-06-17T09:26:39.507Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:02.570368Z"}]}}