Sparx Systems Pty Ltd.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Sparx Pro Cloud Server | 3 | – | Apr 17, 2026 |
| Sparx Enterprise Architect | 2 | – | Apr 17, 2026 |
Exploited and recent CVEs
- CVE-2025-15625 Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server 0.4%
- CVE-2025-15624 Plaintext Storage of a Password in Sparx Pro Cloud Server. 0.4%
- CVE-2025-15623 Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user 0.3%
- CVE-2025-15622 Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret 0.2%
- CVE-2025-15621 Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication 0.1%