CVE-2025-15623

Katalog CVE

CVSS 7.5 · High EPSS 0,26%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada sparxsystems pro cloud server. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can retrieve database password in plaintext in certain situations

Rincian

Terbit di NVD

17 April 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor
CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sparxsystems.com/products/procloudserver/6.1/history.html release notes