Medium · 5.3 CVE-2025-4376 EUVD-2025-14085GHSA-6362-hmcr-gv4j

Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA

Published May 9, 2025 · Updated Aug 26, 2026 · Assigned by NCSC-FI

Description

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS).

This issue affects Pro Cloud Server: earlier than 6.0.165.

Vendor	Product	Affected	Fixed
Sparx Systems	Pro Cloud Server	≤ 6.0.164	6.0.165