CVE-2025-54968

HIGH

BAE SOCET GXP < 4.6.0.2 - Unauthenticated Job Submission via Job Service

Title source: llm
STIX 2.1

Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remote users to submit jobs, or local users to submit jobs that will execute with the permissions of other users.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0036
EPSS Percentile 27.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-284
Status published
Products (1)
baesystems/socet_gxp < 4.6.0.2
Published Oct 27, 2025
Tracked Since Feb 18, 2026