CVE-2025-54966

low-risk
Published 2025-10-23

An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Socet Gxp

Affected Vendors

Baesystems

References (2)

Product https://www.baesystems.com/en-us/product/geospatial-exploitation-products
Vendor Advisory https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities...
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal