What’s Vulnerable › Products

Sparx Systems Pro Cloud Server vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Sparx Systems Pro Cloud Server version is affected

Latest Sparx Systems Pro Cloud Server vulnerabilities

• CVE-2026-42100 — DoS in Sparx Pro Cloud Server (CVSS 7.5)
• CVE-2026-42099 — Race Condition in Sparx Pro Cloud Server (CVSS 7.5)
• CVE-2026-42097 — Authentication Bypass in Sparx Pro Cloud Server (CVSS 8.8)
• CVE-2026-42096 — Broken Access Control in Sparx Pro Cloud Server (CVSS 8.8)
• CVE-2025-15625 — Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server (CVSS 9.8)
• CVE-2025-15624 — Plaintext Storage of a Password in Sparx Pro Cloud Server. (CVSS 7.5)
• CVE-2025-15623 — Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user (CVSS 7.5)
• CVE-2025-4377 — Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php (CVSS 8.3)
• CVE-2025-4376 — Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA (CVSS 5.3)
• CVE-2025-4375 — Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA (CVSS 6.9)