PT-2026-33424 · Sparx Systems Pty · Sparx Pro Cloud Server

Published 2026-04-17 · Updated 2026-04-17 · CVE-2025-15623

Mitre

CVSS v4.0

9.3

Critical

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/S:P/AU:Y/V:C/RE:M/U:Red

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.

Unauthenticated user can retrieve database password in plaintext in certain situations

Fix

Weakness Enumeration

CWE-359

CWE-497

Related Identifiers

CVE-2025-15623

Affected Products

Sparx Pro Cloud Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-15623 · Security Note
• https://sparxsystems.com/products/procloudserver/6.1/history.html · Note
• https://twitter.com/CVEnew/status/2045102588241023228 · Twitter Post