Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-4376

Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sparx Systems Pro Cloud Server

Default version status: unaffected

  • 0 to ≤ 6.0.164affected
  • 6.0.165unaffected

References