Medium severityNVD Advisory· Published Apr 16, 2026· Updated Apr 17, 2026

CVE-2025-15621

Description

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Affected products

Sparx Systems Pty Ltd./Enterprise Architectllm-fuzzy

Patches

Vulnerability mechanics

References

sparxsystems.com/products/ea/17.1/history.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000