How many Sparx Systems Pro Cloud Server CVEs are in CISA KEV?

None of Sparx Systems Pro Cloud Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Sparx Systems Pro Cloud Server are affected?

8 distinct Sparx Systems Pro Cloud Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Sparx Systems Pro Cloud Server CVEs?

Sparx Systems Pro Cloud Server's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-228 (Improper Handling of Syntactically Invalid Structure), CWE-256 (Plaintext Storage of a Password).

How many critical Sparx Systems Pro Cloud Server vulnerabilities are there?

Sparx Systems Pro Cloud Server has 4 critical and 4 high-severity CVEs.

What is the average severity of Sparx Systems Pro Cloud Server CVEs?

The average CVSS base score across Sparx Systems Pro Cloud Server's scored CVEs is 8.1.

RadicalNotion.AI

Log in Create an account

Sparx Systems

10 CVEs

Sparx Systems Pro Cloud Server Vulnerabilities

Name: Sparx Systems Pro Cloud Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Pro Cloud Server by Sparx Systems.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

8.1

Avg CVSS

2025–2026

Last updated May 19, 2026

Overview

Sparx Systems Pro Cloud Server has 10 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 8.1. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Sparx Systems Pro Cloud Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High4

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Sparx Systems Pro Cloud Server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of Sparx Systems Pro Cloud Server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Sparx Systems Pro Cloud Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 6.14 CVEs
<= 6.1.1674 CVEs
>= 6.0.1653 CVEs
6.0.163 <= v <= 6.0.1633 CVEs
<= 6.0.141 CVE
<= 6.0.1631 CVE
<= 6.0.1641 CVE

Fixed in

6.0.1653 CVEs

Find a version

10 CVEs

Sort

DoS in Sparx Pro Cloud Server
CVE-2026-42100
Public exploit
CWE-228
High · CVSS 7.1
EPSS 0.6% (49th pct)2026-05-19
Race Condition in Sparx Pro Cloud Server
CVE-2026-42099
Public exploit
CWE-362
High · CVSS 7.7
EPSS 0.7% (50th pct)2026-05-19
Authentication Bypass in Sparx Pro Cloud Server
CVE-2026-42097
Public exploit
CWE-639
Critical · CVSS 9.3
EPSS 0.9% (59th pct)2026-05-19
Broken Access Control in Sparx Pro Cloud Server
CVE-2026-42096
Public exploit
CWE-863
High · CVSS 8.7
EPSS 0.6% (47th pct)2026-05-19
Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server
CVE-2025-15625CWE-200
Critical · CVSS 9.5
EPSS 0.4% (35th pct)2026-04-17
Plaintext Storage of a Password in Sparx Pro Cloud Server.
CVE-2025-15624CWE-256
Critical · CVSS 9.3
EPSS 0.4% (30th pct)2026-04-17
Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user
CVE-2025-15623CWE-497
Critical · CVSS 9.3
EPSS 0.3% (17th pct)2026-04-17
Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php
CVE-2025-4377
Patch
CWE-22
High · CVSS 8.3
EPSS 0.8% (54th pct)2025-05-09
Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA
CVE-2025-4376
Patch
CWE-79
Medium · CVSS 5.3
EPSS 0.7% (50th pct)2025-05-09
Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA
CVE-2025-4375
Patch
CWE-352
Medium · CVSS 6.9
EPSS 0.3% (24th pct)2025-05-09

Common weakness types

The CWE weakness categories most often found in Sparx Systems Pro Cloud Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Sparx Systems Pro Cloud Server CVEs were published each year.

2025

3

2026

7

Other Sparx Systems products

Browse vulnerabilities for other products by Sparx Systems.

enterprise architect4 CVEs Sparx Pro Cloud Server3 CVEs Sparx Enterprise Architect2 CVEs

All Sparx Systems vulnerabilities

Frequently asked questions

Common questions about Sparx Systems Pro Cloud Server vulnerabilities.

How many CVEs does Sparx Systems Pro Cloud Server have?: Sparx Systems Pro Cloud Server has 10 published CVE records since 2025.
How many Sparx Systems Pro Cloud Server CVEs are in CISA KEV?: None of Sparx Systems Pro Cloud Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Sparx Systems Pro Cloud Server vulnerabilities?: Yes — 4 of Sparx Systems Pro Cloud Server's CVEs have a known public exploit.
Which versions of Sparx Systems Pro Cloud Server are affected?: 8 distinct Sparx Systems Pro Cloud Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Sparx Systems Pro Cloud Server CVEs?: Sparx Systems Pro Cloud Server's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-228 (Improper Handling of Syntactically Invalid Structure), CWE-256 (Plaintext Storage of a Password).
How many critical Sparx Systems Pro Cloud Server vulnerabilities are there?: Sparx Systems Pro Cloud Server has 4 critical and 4 high-severity CVEs.
What is the average severity of Sparx Systems Pro Cloud Server CVEs?: The average CVSS base score across Sparx Systems Pro Cloud Server's scored CVEs is 8.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Sparx Systems Pro Cloud Server vulnerabilities

Get an alert for each new Sparx Systems Pro Cloud Server CVE, with AI-written analysis and remediation steps.

Create an account See pricing