Paper/Archive/CVE-2025-15623

CVE-2025-15623

Sparx Systems Pty Ltd. Sparx Pro Cloud Server — Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

EPSS 0.3%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 17.9.179 × 203.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Affected

ProductAffectedFixed inSource

Sparx Pro Cloud Server6.0.163–CNA

Scores by source

NCSC-FI (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/S:P/AU:Y/V:C/RE:M/U:Red

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsparxsystems.com/products/procloudserver/6.1/history.html