Skip to content
OpenAdvisories

Vendor

Sparx Systems

14 known vulnerabilities.

Products

Pro Cloud Server 7 Sparx Pro Cloud Server 3 Sparx Enterprise Architect 2 Enterprise Architect 2 Enterprise Architect < 16.0.1625 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2026-88794

    XML External Entity injection in Sparx Enterprise Architect

    Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to…

    Sparx Systems Enterprise Architect
  • High 7.1
    CVE-2026-42100

    DoS in Sparx Pro Cloud Server

    Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query. This causes the Pro Cloud Server service to terminate unexpectedly.  The vendor was …

    Sparx Systems Pro Cloud Server
  • High 7.7
    CVE-2026-42099

    Race Condition in Sparx Pro Cloud Server

    Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the properties of the object pointed by guid parameter and saves loaded content in current location (__DIR__) under the spec…

    Sparx Systems Pro Cloud Server
  • High 8.7
    CVE-2026-42098

    Authorization Bypass in Sparx Enterprise Architect

    Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or adminis…

    Sparx Systems Enterprise Architect
  • High 8.7
    CVE-2026-42096 Public exploit

    Broken Access Control in Sparx Pro Cloud Server

    Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database. Due to lack of permission checks, any low privileged user can run arbitrary SQL queries within database user context. The vendor was notified early about thi…

    Sparx Systems Pro Cloud Server
  • High 8.3
    CVE-2025-4377

    Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php

    Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it allows reading arbitrary files on the filesystem.  Logview is accessible on Pro Cloud Server Configu…

    Sparx Systems Pro Cloud Server