Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://sparxsystems.com/products/ea/17.1/history.html |
Configurations
No configuration.
History
16 Apr 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-16 13:16
Updated : 2026-04-17 15:17
NVD link : CVE-2025-15621
Mitre link : CVE-2025-15621
CVE.ORG link : CVE-2025-15621
JSON object : View
Products Affected
No product.
CWE
CWE-522
Insufficiently Protected Credentials