An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information.
References
Configurations
History
28 Oct 2025, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:baesystems:socet_gxp:*:*:*:*:*:*:*:* | |
| First Time |
Baesystems
Baesystems socet Gxp |
|
| References | () https://www.baesystems.com/en-us/product/geospatial-exploitation-products - Product | |
| References | () https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54966 - Vendor Advisory |
24 Oct 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
23 Oct 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.1 |
23 Oct 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-23 20:15
Updated : 2025-10-28 16:19
NVD link : CVE-2025-54966
Mitre link : CVE-2025-54966
CVE.ORG link : CVE-2025-54966
JSON object : View
Products Affected
baesystems
- socet_gxp
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor