Sparx Systems Pty Ltd. Sparx Enterprise Architect

• CVE-2025-15622 Medium 6.2 Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret 0.2%
• CVE-2025-15621 Medium 5.7 Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication 0.1%