sparxsystems has 4 CVEs on record. The busiest recent month was April 2026 with 4. The median CVSS is 7.5 (high), with 1 rated critical. Most affected products: pro_cloud_server (3), enterprise_architect (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- pro_cloud_server 3
- enterprise_architect 1
Worst active — by depth score
CVE-2025-15625Critical· 9.8Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.54CVE-2025-15624High· 7.5Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd41CVE-2025-15623High· 7.5Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd41CVE-2025-15621Medium· 6.0Insufficiently Protected Credentials in Sparx Systems Pty Ltd33
sparxsystems vulnerabilities
CVEs affecting sparxsystems, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2025-15625Critical· 9.8Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.
CVE-2025-15624High· 7.5Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd
Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local password…
CVE-2025-15623High· 7.5Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd
Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. Unauthenticated user can ret…
CVE-2025-15621Medium· 6.0Insufficiently Protected Credentials in Sparx Systems Pty Ltd
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication