What’s Vulnerable › Products
Sparx Systems Enterprise Architect vulnerabilities
5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Sparx Systems Enterprise Architect version is affected
Latest Sparx Systems Enterprise Architect vulnerabilities
- CVE-2026-88794 — XML External Entity injection in Sparx Enterprise Architect (CVSS 8.2)
- CVE-2026-42098 — Authorization Bypass in Sparx Enterprise Architect (CVSS 8.7)
- CVE-2025-15622 — Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret (CVSS 6.2)
- CVE-2025-15621 — Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication (CVSS 6.0)
- CVE-2022-47072 — (CVSS 9.8)