EUVD-2025-36228

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status page. An attacker who is able to social engineer a user into clicking a malicious link may be able to execute arbitrary...

EUVD-2025-36206

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service...

CVE-2025-54965

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status page. An attacker who is able to social engineer a user into clicking a malicious link may be able to execute arbitrary...

CVE-2025-54965

An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status page. An attacker who is able to social engineer a user into clicking a malicious link may be able to execute arbitrary...

CVE-2025-54969

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service...

CVE-2025-54969

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protections. An attacker who social engineers a valid user into clicking a malicious link or visiting a malicious website may be able to submit requests to the Job Status Service...

CVE-2025-54970

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner...

CVE-2025-54970

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner...

CVE-2025-9164

creationtimestamp| type| source ---|---|--- 2025-10-27 14:01:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446492858470718 2025-10-27 15:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m46puin65h2x 2025-10-28 13:15:34+00:00| seen|...

CVE-2025-12273

creationtimestamp| type| source ---|---|--- 2025-10-27 13:49:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446447915141841 2025-10-27 15:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m46rgotq2s2s...

CVE-2025-12272

creationtimestamp| type| source ---|---|--- 2025-10-27 13:49:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446447915141841...

CVE-2025-12271

creationtimestamp| type| source ---|---|--- 2025-10-27 13:49:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446447915141841...

CVE-2025-11955

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

CVE-2025-11955 Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

CVE-2025-11955 Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

CVE-2025-12234

creationtimestamp| type| source ---|---|--- 2025-10-27 08:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45xnyunyq2i 2025-10-27 13:49:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115446447915141841 2026-09-09 05:00:15+00:00| seen|...

CVE-2025-12215

creationtimestamp| type| source ---|---|--- 2025-10-27 07:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45uojooli2c...

CVE-2025-12198

creationtimestamp| type| source ---|---|--- 2025-10-27 04:26:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45lbhbu3g2o 2025-10-27 15:36:34+00:00| seen| https://seclists.org/oss-sec/2025/q4/72...

CVE-2025-54969

BAE Systems SOCET GXP before 4.6.0.2 is affected by CVE-2025-54969 due to the SOCET GXP Job Status Service lacking CSRF protections. An attacker could trick an authenticated user into visiting a malicious link or site and submit requests to the Job Status Service without user knowledge. Documente...

TheGreenBow VPN 安全漏洞

TheGreenBow VPN is a VPN client software from the French company TheGreenBow. A security vulnerability exists in TheGreenBow VPN versions 7.5 and 7.6 that stems from incorrect OCSP certificate validation and could lead to the creation of insecure VPN tunnels...