Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Sparx Systems Component: Pro Cloud Server Clear all filters
TI-2026-30466 CVE-2026-42100 · GHSA-r2pf-hp27-79jw

DoS in Sparx Pro Cloud Server

Priority LOW 32

Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00682 Published 2026-05-19 No fix listed CWE-228
TI-2026-30465 CVE-2026-42099 · GHSA-qff4-m3j5-xcv5

Race Condition in Sparx Pro Cloud Server

Priority LOW 37

Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00724 Published 2026-05-19 No fix listed CWE-362
TI-2026-30463 CVE-2026-42097 · GHSA-hf6p-xc3f-p4f9

Authentication Bypass in Sparx Pro Cloud Server

Priority MEDIUM 50

Sparx Pro Cloud Server requires authentication based on requested URL.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00941 Published 2026-05-19 No fix listed CWE-639
TI-2026-30462 CVE-2026-42096 · GHSA-544c-gfhm-rwqf

Broken Access Control in Sparx Pro Cloud Server

Priority MEDIUM 47

Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00598 Published 2026-05-19 No fix listed CWE-863