Advisories · Technology

Sparx Systems Pty Ltd. Sparx Pro Cloud Server.

Every CVE that names Sparx Systems Pty Ltd. Sparx Pro Cloud Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-15625 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server
- Sparx Systems Pty Ltd. Sparx Pro Cloud Server
- SQL injection
- Information disclosure
Not analysed yet 17 Apr 2026
CVE-2025-15624 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Plaintext Storage of a Password in Sparx Pro Cloud Server.
- Sparx Systems Pty Ltd. Sparx Pro Cloud Server
- CWE-256
Not analysed yet 17 Apr 2026
CVE-2025-15623 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user
- Sparx Systems Pty Ltd. Sparx Pro Cloud Server
- Information disclosure
Not analysed yet 17 Apr 2026