CVE-2025-54965 - An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2

Back Back to CVE browser

MEDIUM

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2

Published Oct 27, 2025

6.1

MEDIUM

CVSS 3.1

EPSS 0.20%

Description

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status page. An attacker who is able to social engineer a user into clicking a malicious link may be able to execute arbitrary JavaScript in the victim's browser.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-36228		Advisory
https://www.baesystems.com/en-us/product/geospatial-exploitation-products		Product
https://www.geospatialexploitationproducts.com/content/socet-gxp/vulnerabilities-disclosure/#cve-2025-54965		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 27, 2025

Updated Oct 27, 2025

Reserved Aug 4, 2025

Link CVE-2025-54965

CISA Vulnrichment

Updated Oct 27, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-54965

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 27, 2025

Updated Oct 27, 2025

Link EUVD-2025-36228

GitHub

No data