CVE-2025-15623CWE-359CWE-497

CVE-2025-15623

High · published April 17, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.

Unauthenticated user can retrieve database password in plaintext in certain situations

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Weaknesses
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor; CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-04-17T13:16Z
Affected products (1)
ProductVersionsFixed in
sparxsystems/pro_cloud_serverall versions—
References (1)
https://sparxsystems.com/products/procloudserver/6.1/history.html · db4dfee8-a97e-4877-bfae-eba6d14a2166
EPSS history
Timeline
  • 17 APR 08:37Z
    Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user
    cvelistv5