CVE-2025-15624CWE-256

CVE-2025-15624

High · published April 17, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.

In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-04-17T13:16Z
Affected products (1)
ProductVersionsFixed in
sparxsystems/pro_cloud_serverall versions—
References (1)
https://sparxsystems.com/products/procloudserver/6.1/history.html · db4dfee8-a97e-4877-bfae-eba6d14a2166
EPSS history
Timeline
  • 17 APR 08:38Z
    Plaintext Storage of a Password in Sparx Pro Cloud Server.
    cvelistv5