CVE-2025-4375CWE-352

Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA

Medium · published May 9, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password.

This issue affects Pro Cloud Server: earlier than 6.0.165.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00324 · 24.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-05-09T05:12Z
EPSS history
Timeline
  • 09 MAY 05:12Z
    Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA
    cvelistv5