PT-2025-43989 · Bae Systems · Socet Gxp

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-54969

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions BAE SOCET GXP versions prior to 4.6.0.2

Description The SOCET GXP Job Status Service lacks Cross-Site Request Forgery (CSRF) protections. An attacker could potentially trick a legitimate user into unknowingly submitting requests to the Job Status Service by exploiting a malicious link or website. This could allow the attacker to perform actions as the user without their consent.

Recommendations Update BAE SOCET GXP to version 4.6.0.2 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-54969

Affected Products

Socet Gxp

References · 5

• https://geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54969 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54969 · Vendor Advisory
• https://baesystems.com/en-us/product/geospatial-exploitation-products · Note
• https://t.me/CVEtracker/35870 · Telegram Post