CVE-2025-54969

6.1 mediumEPSS 0.1%

Medium (6.1) in baesystems socet gxp. EPSS 0.1% chance of exploitation in the next 30 days.

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service without the user's knowledge.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2025-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

baesystems:socet_gxp

References

https://www.baesystems.com/en-us/product/geospatial-exploitation-products
https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54969

Check your stack JSON