CVE-2025-54969
MEDIUMBAE SOCET GXP < 4.6.0.2 - Cross-Site Request Forgery in Job Status Service
Title source: llmDescription
An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service without the user's knowledge.
References (2)
Core 2
Core References
Mitigation, Vendor Advisory
https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54969
Scores
CVSS v3
6.1
EPSS
0.0011
EPSS Percentile
1.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (1)
baesystems/socet_gxp
< 4.6.0.2
Published
Oct 27, 2025
Tracked Since
Feb 18, 2026