CVE-2025-15623

critical · 9.3

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

9.3

CVSS

0.3%

EPSS (exploit prob.)

18th

EPSS percentile

2026-04-17

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:C/RE:M/U:Red

Weaknesses

CWE-359CWE-497

Affected products

Vendor	Product	Affected versions
sparxsystems	pro_cloud_server	6.0.163

Check a specific version with /api/v1/cve/match.

References

https://sparxsystems.com/products/procloudserver/6.1/history.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-15623