CVE-2025-15621
Insufficiently Protected Credentials in Sparx Systems Pty Ltd.
Published Apr 16, 2026 · updated Oct 7, 2026 · sparxsystems enterprise architect
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 16, 2026 · NIST NVD
Detected
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Oct 7, 2026 · NIST NVD
Updated
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
Affected
- cpe sparxsystems/enterprise architectversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-15621
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-15621
Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
nvd.nist.gov