CVE-2025-15623

Upgrade Sparx Pro Cloud Server to version 6.1 or later immediately, as documented in the vendor's product history at https://sparxsystems.com/products/procloudserver/6.1/history.html. After upgrading, rotate all database credentials that were potentially exposed, including changing passwords for database users referenced in Pro Cloud Server configuration files. Review database access logs for unauthorized connections originating from unexpected IP addresses or occurring during timeframes when the vulnerable version was deployed. If immediate patching is not feasible, implement compensating controls: restrict network access to Pro Cloud Server administrative interfaces using firewall rules permitting only trusted management networks (NOT internet-facing), deploy web application firewall rules to block requests to configuration or diagnostic endpoints that may leak credentials, and enable comprehensive access logging to detect reconnaissance attempts. Note that network restrictions significantly reduce exploitability given the AV:N attack vector but do not eliminate risk from internal threats or compromised trusted networks. Schedule emergency maintenance window for upgrade as plaintext credential exposure enables complete database compromise.