Sensitive Information Exposure in Sparx Pro Cloud Server by Sparx Systems
CVE-2025-15623

9.3CRITICAL

Key Information:

Vendor

Sparx Systems Pty Ltd.

Status
Sparx Pro Cloud Server
Vendor
CVE Published:
17 April 2026

What is CVE-2025-15623?

In Sparx Pro Cloud Server, an unauthenticated user may exploit certain conditions to access sensitive system information, including retrieving database passwords in plaintext. This vulnerability can lead to unauthorized access and potentially compromise user data and system integrity if not addressed promptly.

Affected Version(s)

Sparx Pro Cloud Server 6.0.163

References

https://sparxsystems.com/products/procloudserver/6.1/hist...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pasi Orovuo, Solita Oy
Henri Hämäläinen, Solita Oy
Samu Ahvenainen, Solita Oy
.