EUVD-2025-209499

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

CVE-2025-15621

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

CVE-2025-15621 Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

CVE-2025-15621

CVE-2025-15621 affects the Sparx Systems Sparx Enterprise Architect client. The issue is that the client does not verify the receiver of OAuth2 credentials during OpenID authentication, indicating a flaw in credential handling that could allow credential misdirection or leakage within the OAuth/O...

PT-2026-33311

Name of the Vulnerable Software and Affected Versions Sparx Enterprise Architect affected versions not specified Description Insufficiently protected credentials exist where the client fails to verify the receiver of OAuth2 credentials during OpenID authentication. Recommendations At the moment,...

PT-2026-56436

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.8.0 Description A cross-site scripting issue exists in the credential management flow. Authenticated users can inject malicious JavaScript URLs into the OAuth2 credential Authorization URL fields. This allows an attacke...