Vulnerabilities > ZTE > High

DATE CVE VULNERABILITY TITLE RISK
2025-04-27 CVE-2025-46580 Unspecified vulnerability in ZTE Zxcloud Goldendb
There is a code-related vulnerability in the GoldenDB database product.
network
low complexity
zte
7.5
2025-04-27 CVE-2025-46575 Information Exposure Through an Error Message vulnerability in ZTE Zxcloud Goldendb 6.1.03.09/6.1.03.10/7.2.01.01
There is an information disclosure vulnerability in the GoldenDB database product.
network
low complexity
zte CWE-209
7.5
2025-04-27 CVE-2025-46577 SQL Injection vulnerability in ZTE Zxcloud Goldendb 7.2.01.01
There is a SQL injection vulnerability in the GoldenDB database product.
network
low complexity
zte CWE-89
7.5
2025-04-27 CVE-2025-46578 SQL Injection vulnerability in ZTE Zxcloud Goldendb 7.2.01.01
There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product.
network
low complexity
zte CWE-89
7.5
2025-04-27 CVE-2025-46579 Code Injection vulnerability in ZTE Zxcloud Goldendb 7.2.01.01
There is a DDE injection vulnerability in the GoldenDB database product.
local
low complexity
zte CWE-94
7.8
2025-03-11 CVE-2025-26702 Unspecified vulnerability in ZTE Goldendb
Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04.
network
low complexity
zte
7.5
2024-11-18 CVE-2024-22067 Unspecified vulnerability in ZTE Nh8091 Firmware Znh8091V1.8
ZTE NH8091 product has an improper permission control vulnerability.
network
low complexity
zte
8.8
2024-10-29 CVE-2024-22065 OS Command Injection vulnerability in ZTE Mf258K PRO Firmware 1.0.0B03
There is a command injection vulnerability in ZTE MF258 Pro product.
network
low complexity
zte CWE-78
8.8
2024-08-08 CVE-2024-22069 Unspecified vulnerability in ZTE Zxv10 Et301 Firmware and Zxv10 Xt802 Firmware
There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords.
network
low complexity
zte
8.8
2024-07-09 CVE-2024-22062 Incorrect Default Permissions vulnerability in ZTE Zxcloud Irai
There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration.
local
low complexity
zte CWE-276
8.8