# Sparx Systems Pty Ltd. Sparx Enterprise Architect.

Every CVE that names Sparx Systems Pty Ltd. Sparx Enterprise Architect among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Sparx Enterprise Architect Client reveals plaintext OAuth2 client secret](https://agentprime.io/advisories/CVE-2025-15622.md)
  `CVE-2025-15622` · CVE record: Sparx Systems Pty Ltd. Sparx Enterprise Architect · CVSS 6.2 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Hard-coded credentials
- [Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication](https://agentprime.io/advisories/CVE-2025-15621.md)
  `CVE-2025-15621` · CVE record: Sparx Systems Pty Ltd. Sparx Enterprise Architect · CVSS 5.7 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Hard-coded credentials

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=sparx-systems-pty-ltd-sparx-enterprise-architect>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/sparx-systems-pty-ltd-sparx-enterprise-architect/>. Everything for agents: <https://agentprime.io/llms.txt>.