Baesystems

8 CVEs across 1 Baesystems products. Browse Baesystems vulnerabilities, severities, and proof-of-concept exploits.

Baesystems products with known CVEs

ProductCVEs
Socet Gxp8
Baesystems CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-54965Medium6.12025-10-27An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it i…
CVE-2025-54970Medium6.52025-10-27An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allo…
CVE-2025-54969Medium6.12025-10-27An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers…
CVE-2025-54968High8.82025-10-27An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remo…
CVE-2025-54967Medium6.52025-10-27An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An attacker who is able to social engineer a…
CVE-2025-54966Medium4.32025-10-23An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situati…
CVE-2025-54964High8.42025-10-23An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may inject arbitrary executables. If…
CVE-2025-54963Medium6.52025-10-23An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request tha…