Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret
Priority LOW 27CWE-522Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-522.
Summary
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes the secret and uses the plaintext secret to exchange it into an access and id tokens as part of the OpenID authentication flow.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00155 4th percentileScored 2026-11-07
Fix Fixed Sparx Enterprise Architect (Sparx Systems Pty Ltd.): 17.1.1714
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Sparx Systems | Sparx Enterprise Architect | 16.1.1627 | 17.1.1714 | Patch available | CNA |
- Sparx Enterprise Architect VendorSparx Systems Affected 16.1.1627 Fixed in 17.1.1714 Patch available CNA
Remediation
- Fix · CNA Sparx Enterprise Architect (Sparx Systems Pty Ltd.) Fixed in 17.1.1714
Timeline
- 2026-10-02 Threatist record created from CVE-2025-15622
- 2026-10-03 Alias added: GHSA-g7j3-235h-9jvv
References
More Sparx Systems vulnerabilities
- TI-2022-23300 SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to… CVSS 3.1CRITICAL 9.8
- TI-2026-30463 Authentication Bypass in Sparx Pro Cloud Server CVSS 4.0CRITICAL 9.3
- TI-2025-14252 Plaintext Storage of a Password in Sparx Pro Cloud Server. CVSS 4.0CRITICAL 9.3
- TI-2025-14251 Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user CVSS 4.0CRITICAL 9.3
- TI-2026-30462 Broken Access Control in Sparx Pro Cloud Server CVSS 4.0HIGH 8.7
- TI-2025-14253 Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server CVSS 4.0CRITICAL 9.5
Sources
- CVE-2025-15622 · CVE Program
- CVE-2025-15622 · NVD
- FIRST EPSS
- GHSA-g7j3-235h-9jvv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences