CVE-2025-15621

Description

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

References

• https://sparxsystems.com/products/ea/17.1/history.html