Vulnerabilities in Sparx Systems Pty Ltd.

5 results

CVE-2025-15625CRITICALUnauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud ServerEPSS 0.4%CVE-2025-15624CRITICALPlaintext Storage of a Password in Sparx Pro Cloud Server.EPSS 0.4%CVE-2025-15623CRITICALSparx Pro Cloud Server reveals sensitive information to an unauthenticated userEPSS 0.3%CVE-2025-15622MEDIUMSparx Enterprise Architect Client reveals plaintext OAuth2 client secretEPSS 0.2%CVE-2025-15621MEDIUMSparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authenticationEPSS 0.1%