← CVE Intelligence

CVE-2025-46579

ZTE GoldenDB Database product has a DDE injection vulnerability PUBLISHED

Description (CNA)

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

Affected (CNA)

Vendor / productVersions
ZTE / GoldenDBaffected 6.1.03 through 6.1.03.10; affected 7.2.01.01; affected Lite7.2.01.01

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.