Skip to content
OpenAdvisories

Product · Sparx Systems

Enterprise Architect

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-88794

    XML External Entity injection in Sparx Enterprise Architect

    Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to…

    Sparx Systems Enterprise Architect
  • High 8.7
    CVE-2026-42098

    Authorization Bypass in Sparx Enterprise Architect

    Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or adminis…

    Sparx Systems Enterprise Architect