Sparx Systems

Products

ProductCVEsExploitedLatest
Pro Cloud Server7–May 19, 2026
Enterprise Architect2–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-88794 High 8.2 XML External Entity injection in Sparx Enterprise Architect 0.3%
  • CVE-2026-42100 High 7.1 DoS in Sparx Pro Cloud Server 0.7%
  • CVE-2026-42099 High 7.7 Race Condition in Sparx Pro Cloud Server 0.7%
  • CVE-2026-42098 High 8.7 Authorization Bypass in Sparx Enterprise Architect 0.4%
  • CVE-2026-42097 Critical 9.3 Authentication Bypass in Sparx Pro Cloud Server 0.9%
  • CVE-2026-42096 High 8.7 Broken Access Control in Sparx Pro Cloud Server 0.6%
  • CVE-2025-4377 High 8.3 Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php 0.8%
  • CVE-2025-4376 Medium 5.3 Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA 0.7%
  • CVE-2025-4375 Medium 6.9 Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA 0.3%