Sparx Systems vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 20266

Newest CVEs

• CVE-2026-88794

  XML External Entity injection in Sparx Enterprise Architect

  Sparx Systems · Enterprise Architect

  High8.2
• CVE-2026-42100

  DoS in Sparx Pro Cloud Server

  Sparx Systems · Pro Cloud Server

  High7.1
• CVE-2026-42099

  Race Condition in Sparx Pro Cloud Server

  Sparx Systems · Pro Cloud Server

  High7.7
• CVE-2026-42098

  Authorization Bypass in Sparx Enterprise Architect

  Sparx Systems · Enterprise Architect

  High8.7
• CVE-2026-42097

  Authentication Bypass in Sparx Pro Cloud Server

  Sparx Systems · Pro Cloud Server

  Critical9.3
• CVE-2026-42096

  Broken Access Control in Sparx Pro Cloud Server

  Sparx Systems · Pro Cloud Server

  High8.7
• CVE-2025-4377

  Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php

  Sparx Systems · Pro Cloud Server

  High8.3
• CVE-2025-4376

  Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA

  Sparx Systems · Pro Cloud Server

  Medium5.3
• CVE-2025-4375

  Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA

  Sparx Systems · Pro Cloud Server

  Medium6.9