CVE-2025-15624

概要

参考情報

• sparxsystems.com/products/procloudserver/6.1/history.html · Release Notes

pro cloud server のその他の脆弱性

• CVE-2026-42100高 7.5Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sendi…
• CVE-2026-42099高 7.5Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the p…
• CVE-2026-42097高 8.8Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model n…
• CVE-2026-42096高 8.8Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database. Due to lack of permission checks, any …
• CVE-2025-15625緊急 9.8Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.