medium6.0
CVE-2025-15621
Insufficiently Protected Credentials in Sparx Systems Pty Ltd.
Impact
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sparxsystems | Enterprise Architect | from 16.1.1627 before 17.1.1714 |