Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-17 | 3 | Disclosure1General2 |
| 2026-06-02 | 1 | Disclosure1 |
🔴 Sparx Pro Cloud Server, Information Disclosure, #CVE-2025-15623 (Critical) -DC-Jun2026-110 https://dailycve.com/sparx-pro-cloud-server-information-disclosure-cve-2025-15623-critical-dc-jun2026-110/
Post summary
The text announces the existence of a new critical information disclosure vulnerability (CVE‑2025‑15623) in Sparx Pro Cloud Server, without providing technical, exploitation, or patch details.
🚨 CVE-2025-15623: Sparx Pro Cloud Server reveals s... Database passwords in plaintext over the wire with zero auth required - Sparx just handed every attacker the keys to th... https://zerodaysignal.com/vulnerability/CVE-2025-15623 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post discloses CVE-2025-15623, noting that Sparx Pro Cloud Server transmits database credentials in plaintext with no authentication, but does not mention PoC, exploitation status, or a patch.
CVE-2025-15623 Unauthenticated Database Password Exposure in Sparx Systems Pro Cloud Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15623
Post summary
The entry notes the CVE ID and a brief description of an unauthenticated password exposure flaw, but lacks detailed technical data, exploit code, or patch information.
CVE-2025-15623 Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx… https://www.cve.org/CVERecord?id=CVE-2025-15623
Post summary
The message simply cites the CVE record with a brief description of information exposure, offering no technical depth or exploitation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sparxsystems | pro_cloud_server | 6.0.163 | - | - |