Skip to content
OpenAdvisories

Product · Sparx Systems

Pro Cloud Server

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42100

    DoS in Sparx Pro Cloud Server

    Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query. This causes the Pro Cloud Server service to terminate unexpectedly.  The vendor was …

    Sparx Systems Pro Cloud Server
  • High 7.7
    CVE-2026-42099

    Race Condition in Sparx Pro Cloud Server

    Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the properties of the object pointed by guid parameter and saves loaded content in current location (__DIR__) under the spec…

    Sparx Systems Pro Cloud Server
  • High 8.7
    CVE-2026-42096 Public exploit

    Broken Access Control in Sparx Pro Cloud Server

    Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database. Due to lack of permission checks, any low privileged user can run arbitrary SQL queries within database user context. The vendor was notified early about thi…

    Sparx Systems Pro Cloud Server
  • High 8.3
    CVE-2025-4377

    Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php

    Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it allows reading arbitrary files on the filesystem.  Logview is accessible on Pro Cloud Server Configu…

    Sparx Systems Pro Cloud Server