CVE-2026-42099

Technical details beyond the initial description are not publicly available in the provided documents. Monitor for updates.

CVE-2026-42100

Technical details (affected products/versions, root cause, impact, mitigation) are not publicly available in the provided documents. Monitor for updates as new information may be published.

CVE-2026-42097

Sparx products show multiple CVEs with concrete details across Pro Cloud Server and Enterprise Architect. CVE-2026-42097 describes an authentication bypass: a request can omit the model parameter and embed the model name in a POST blob, enabling SQL query execution without authentication. CVE-202...

CVE-2025-15623

Sparx Pro Cloud Server is affected by CVE-2025-15623, where an unauthenticated user can retrieve the database password in plaintext in certain scenarios. The issue is described as exposure of private personal information and sensitive system information to an unauthorized actor, with the CVSS v4....

CVE-2026-42096

Technical details for CVE-2026-42096 are not provided in the supplied documents. Monitor for updates from vendors and CVE databases.

CVE-2025-15624

Affected product : Sparx Pro Cloud Server (Sparx Systems). Issue : When OpenID is used as the primary authentication to Sparx EA, Pro Cloud Server creates local passwords for users and stores them in plaintext. Root cause : plaintext storage of credentials as described. Impact : confidentiality a...

CVE-2025-15625

CVE-2025-15625 involves the Sparx Pro Cloud Server where an unauthenticated user can execute arbitrary SQL commands in certain cases. Affected product: Sparx Pro Cloud Server (unspecified version in the provided documents). Impact is described as high across confidentiality, integrity, and availa...