Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-15623

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

Description

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sparx Systems Pty Ltd. Sparx Pro Cloud Server

Default version status: unknown

  • 6.0.163affected

References