Description
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sparx Systems Pty | Sparx Enterprise Architect | 16.1.1627 | 17.1.1714 |
Advisories 1
- WID-SEC-2026-1163 Sparx Systems Enterprise Architect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 16, 2026