enterprise_architect vulnerabilities
CVEs whose affected-version data names the enterprise_architect package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-88794High· 8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature
Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, a…
▾ TwilightSparx Systems · Enterprise ArchitectEPSS 0.33%via NVD
CVE-2025-15621Medium· 6.0Insufficiently Protected Credentials in Sparx Systems Pty Ltd
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
▾ Sunlitsparxsystems · enterprise_architectEPSS 0.11%via NVD