What’s Vulnerable › Vulnerabilities
CVE-2025-15624: Plaintext Storage of a Password in Sparx Pro Cloud Server.
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-17 · updated 2026-10-07
- Weakness: CWE-256
Description
Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext.
Affected products
- Sparx Systems Pro Cloud Server: 6.0.163
References
Get alerted when CVE-2025-15624 or the next vulnerability affects your stack