Critical · 9.8 CVE-2022-47072 EUVD-2022-49849GHSA-c39j-wph3-8c3c

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter …

Published Jan 31, 2024 · Updated Jun 17, 2025 · Assigned by mitre

Description

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box..

Advisories 1

WID-SEC-2024-0268 Sparx Systems Enterprise Architect: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jan 31, 2024

References

https://github.com/DojoSecurity/Enterprise-Architect-SQL-Injection