This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-15623 | BDVDB-2026-327459 Detail

Sparx Systems PtySparx Pro Cloud Server

Description#

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.