Dashboard / CVE-2025-54968

CVE-2025-54968

HIGH
MEDIUM Priority: 0.04 BB Relevance: 68/100
Published: 2025-10-27 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remote users to submit jobs, or local users to submit jobs that will execute with the permissions of other users.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
baesystems socet_gxp < 4.6.0.2

References & Advisories (2)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.41%
Raw Score 0.004130
Percentile 36.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00413
2026-11-12
0.00413
2026-11-10
0.00413
2026-11-09
0.00413
2026-11-08
0.00413
2026-11-07
0.00413
2026-11-06
0.00413
2026-11-05
0.00413

Intelligence Sources

nvd ref →

External Links