PT-2026-33425 · Sparx Systems · Pro Cloud Server

Published 2026-04-17 · Updated 2026-06-02 · CVE-2025-15624

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions Sparx Pro Cloud Server (affected versions not specified)

Description In configurations where OpenID is utilized as the primary authentication method for Sparx EA, the software creates local passwords for users and stores them in plaintext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-15624

Affected Products

Pro Cloud Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-15624 · Security Note
• https://twitter.com/VulmonFeeds/status/2045117232775143577 · Twitter Post
• https://twitter.com/0dayPublishing/status/2045116244395765795 · Twitter Post
• https://twitter.com/dailycve/status/2061855741284057451 · Twitter Post
• https://sparxsystems.com/products/procloudserver/6.1/history.html · Note
• https://twitter.com/CVEnew/status/2045102587188310515 · Twitter Post