Enterprise Architect vulnerabilities

2 known vulnerabilities in Enterprise Architect from Sparx Systems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Enterprise Architect: Improper Restriction of XML External Entity Reference

  CVE-2026-88794Oct 15, 2026Sparx Systems

  Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to

• 8.7 High severity

  Enterprise Architect: Use of Client-Side Authentication

  CVE-2026-42098May 19, 2026Sparx Systems

  Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or administ