Sparx Systems

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Sparx Systems records in CISA KEV

No Sparx Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pro Cloud Server 7 records MEDIUM Enterprise Architect 2 records HIGH

Records

2 records in Enterprise Architect · all components

TI-2022-23300 CVE-2022-47072 · GHSA-c39j-wph3-8c3c

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to…

HIGH 82

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2024-01-31 No fix listed CWE-89

TI-2025-14249 CVE-2025-15621 · GHSA-g8rx-2jmm-3847

Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication

LOW 24

Insufficiently Protected Credentials in Sparx Systems Pty Ltd.

CVSS 4.0MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00106 Published 2026-04-16 Fixed in 17.1.1714 CWE-522

Open these records in search →

Critical	5
High	6
Medium	4
Low	0
No CVSS	0