Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-15623 EUVD-2025-209513GHSA-mqmv-fjj3-cwjx

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

Published Apr 17, 2026 · Updated Apr 17, 2026 · Assigned by NCSC-FI

Description

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server.

Unauthenticated user can retrieve database password in plaintext in certain situations

Affected products

VendorProductAffectedFixed
Sparx Systems Pty Sparx Pro Cloud Server 6.0.163 —

References