QwikSec

Security Database

CVE

CWE

Training

CVE-2025-15623

Published: Apr 17, 2026

Modified: Apr 17, 2026

PUBLISHED

Description

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Vendor	Product	Versions
Sparx Systems Pty Ltd.	Sparx Pro Cloud Server	affected `6.0.163`

Weaknesses (CWE)

References

https://sparxsystems.com/products/procloudserver/6.1/history.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.