CVE-2025-15625
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Published Apr 17, 2026 · updated Oct 7, 2026 · sparxsystems pro cloud server
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 17, 2026 · NIST NVD
Detected
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Oct 7, 2026 · NIST NVD
Updated
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Affected
- cpe sparxsystems/pro cloud server6.0.163
Sources
- CVE.orgVulnerability recordCVE-2025-15625
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-15625
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
nvd.nist.gov