CVE-2025-15625: Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server
Published Apr 17, 2026
·Updated
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Affected Software
2 affected components
Sparx Systems Pro Cloud Server
Sparxsystems Pro Cloud Server=6.0.163
Event History
Apr 17, 2026
CVE Published
via MITRE·08:38 AM
Data Sourced
via MITRE·08:38 AM
DescriptionWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-15625?
CVE-2025-15625 has a high severity rating due to the potential for unauthenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2025-15625?
The fix for CVE-2025-15625 involves updating Sparx Pro Cloud Server to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2025-15625?
CVE-2025-15625 affects the Sparx Systems Pro Cloud Server, particularly in versions where unauthorized SQL command execution is possible.
4
What are the potential impacts of CVE-2025-15625?
The impacts of CVE-2025-15625 include unauthorized access to database information and potential data manipulation.
5
Is CVE-2025-15625 an easy vulnerability to exploit?
Yes, CVE-2025-15625 can be exploited easily by unauthenticated users, making it a critical security concern.