An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information.
CVE-2025-54966
CVSS base score
4.3 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-200
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
baesystems socet gxp
References
- www.baesystems.com Product
- www.geospatialexploitationproducts.com Vendor Advisory