Sparx Systems Pty Ltd.

Products

ProductCVEsExploitedLatest
Sparx Pro Cloud Server3–Apr 17, 2026
Sparx Enterprise Architect2–Apr 17, 2026

Exploited and recent CVEs

  • CVE-2025-15625 Critical 9.5 Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server 0.4%
  • CVE-2025-15624 Critical 9.3 Plaintext Storage of a Password in Sparx Pro Cloud Server. 0.4%
  • CVE-2025-15623 Critical 9.3 Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user 0.3%
  • CVE-2025-15622 Medium 6.2 Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret 0.2%
  • CVE-2025-15621 Medium 5.7 Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication 0.1%