VULNERABILITY INTELLIGENCE

CVE-2025-15621

CVSS score6 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-04-16
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Description

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Weakness classification

  • db4dfee8-a97e-4877-bfae-eba6d14a2166: CWE-522

Primary references