WID-SEC-W-2026-1163

DeutschShown in its original language — a full translation is planned for a future version.

Sparx Systems Enterprise Architect: Mehrere Schwachstellen

view advisory published 2026-04-16

Ein Angreifer kann mehrere Schwachstellen in Sparx Systems Enterprise Architect ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-15622US	—	0.15% (5th)	—	2026-04-17
Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client reveals plaintext OAuth2 client secretDesktop client decodes the sec…
CVE-2025-15621US	medium6.0	0.11% (1st)	—	2026-04-16
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

references

External citations — patches, advisories, analysis.

EU Vulnerability Database vom 2026-04-16external
GitHub Advisory Database vom 2026-04-16external
GitHub Advisory Database vom 2026-04-16external
WID-SEC-W-2026-1163 - CSAF Versionself
WID-SEC-2026-1163 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan