CVE-2025-46579
ZTE GoldenDB Database product has a DDE injection vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
ZTE GoldenDB Database product has a DDE injection vulnerability
There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.
Reserved 2025-04-25 | Published 2025-04-27 | Updated 2025-04-28 | Assigner zteCWE-94 Improper Control of Generation of Code ('Code Injection')
support.zte.com.cn/...ui/bulletin/detail/1036467615091601474
Support options
