Sparx Systems Enterprise Architect

2 CVEs affecting Sparx Systems Enterprise Architect. Latest disclosed: 2026-10-15. Critical: 0, High: 0.

Top CVEs affecting Sparx Systems Enterprise Architect
CVESeverityScorePublishedSummary
CVE-2026-887942026-10-15Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCT…
CVE-2026-420982026-05-19Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the…