Sparx Systems

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Sparx Systems records in CISA KEV

No Sparx Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pro Cloud Server 7 records MEDIUM Enterprise Architect 2 records HIGH

Records

7 records in Pro Cloud Server · all components

TI-2026-30463 CVE-2026-42097 · GHSA-hf6p-xc3f-p4f9

Authentication Bypass in Sparx Pro Cloud Server

MEDIUM 50

Sparx Pro Cloud Server requires authentication based on requested URL.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00941 Published 2026-05-19 No fix listed CWE-639

TI-2025-14252 CVE-2025-15624 · GHSA-9gf7-444h-6v98

Plaintext Storage of a Password in Sparx Pro Cloud Server.

MEDIUM 48

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0038 Published 2026-04-17 No fix listed CWE-256

TI-2025-14251 CVE-2025-15623 · GHSA-mqmv-fjj3-cwjx

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

MEDIUM 48

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00261 Published 2026-04-17 No fix listed CWE-359

TI-2026-30462 CVE-2026-42096 · GHSA-544c-gfhm-rwqf

Broken Access Control in Sparx Pro Cloud Server

MEDIUM 47

Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00598 Published 2026-05-19 No fix listed CWE-863

TI-2025-14253 CVE-2025-15625 · GHSA-cpjc-5x9w-83h8

Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server

MEDIUM 43

Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.0042 Published 2026-04-17 No fix listed CWE-200

TI-2026-30465 CVE-2026-42099 · GHSA-qff4-m3j5-xcv5

Race Condition in Sparx Pro Cloud Server

LOW 37

Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00724 Published 2026-05-19 No fix listed CWE-362

TI-2026-30466 CVE-2026-42100 · GHSA-r2pf-hp27-79jw

DoS in Sparx Pro Cloud Server

LOW 32

Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00682 Published 2026-05-19 No fix listed CWE-228

Open these records in search →

Critical	5
High	6
Medium	4
Low	0
No CVSS	0