1. Home
  2. CVE Database
  3. CVE-2025-54963
MEDIUM · 6.5

CVE-2025-54963

An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request that grants read access to files on the file...

Vulnerability Description

An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request that grants read access to files on the filesystem with the permissions of the GXP Job Service process. The path to a file is not sanitized for directory traversal, potentially allowing an attacker to read sensitive files in some configurations.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BaesystemsSocet Gxp< 4.6.0.2

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2025-54963?

CVE-2025-54963 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request that grants read access to files on the file...

How severe is CVE-2025-54963?

CVE-2025-54963 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-54963?

Check the references section above for vendor advisories and patch information. Affected products include: Baesystems Socet Gxp.