Ghostwire
Home / Vulnerabilities / CVE-2025-15621

CVE-2025-15621: Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the...

MEDIUM CVSS 5.5

Published: April 16, 2026 | Last Modified: April 16, 2026

Description

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

CVE Feed
CVE-2025-15621 - Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication
 Tenable CVEs
CVE-2025-15621

References