← All advisories

Critical severity9.8NVD Advisory· Published Apr 17, 2026· Updated Jun 2, 2026

CVE-2025-15625

CVE-2025-15625

Description

Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.

Affected products

2

Sparx Systems Pty Ltd./Sparx Pro Cloud Server2 versions
cpe:2.3:a:sparxsystems:pro_cloud_server:6.0.163:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sparxsystems:pro_cloud_server:6.0.163:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

sparxsystems.com/products/procloudserver/6.1/history.htmlnvdRelease Notes

News mentions

0

No linked articles in our index yet.