CVE-2025-54966

An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.22% chance of exploitation in the next 30 days, 13th percentile

Published

2025-10-23

Updated

2025-10-24

Proof-of-concept exploits (1)

• https://www.baesystems.com/en-us/product/geospatial-exploitation-products

References

• CVE Record
• NVD entry

Related

• CVE-2025-54965
• CVE-2025-54967
• CVE-2025-54964
• CVE-2025-54968
• CVE-2025-54963
• CVE-2025-54969