CVE-2025-54969

An issue was discovered in BAE SOCET GXP before 4.6.0.2

Medium · published October 27, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service without the user's knowledge.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00141 · 3.1th percentile
Published
2025-10-27T00:00Z
EPSS history
Timeline
  • 27 OCT 00:00Z
    An issue was discovered in BAE SOCET GXP before 4.6.0.2
    cvelistv5