Skip to content
OpenAdvisories

Vendor

Sparx Systems

14 known vulnerabilities.

Products

Pro Cloud Server 7 Sparx Pro Cloud Server 3 Sparx Enterprise Architect 2 Enterprise Architect 2 Enterprise Architect < 16.0.1625 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.2
    CVE-2025-15622

    Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret

    Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes the secret and uses the plaintext secret to exchange it into an access and id tokens a…

    Sparx Systems Sparx Enterprise Architect
  • Medium 5.7
    CVE-2025-15621

    Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication

    Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

    Sparx Systems Sparx Enterprise Architect
  • Medium 5.3
    CVE-2025-4376

    Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA

    Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.

    Sparx Systems Pro Cloud Server
  • Medium 6.9
    CVE-2025-4375

    Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA

    Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server …

    Sparx Systems Pro Cloud Server