CVE-2025-4376: Sparx Systems Pro Cloud Server

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.

Affected products

• Sparx Systems Pro Cloud Server: up to and including 6.0.164

Published 2025-05-09. Last modified 2026-08-26.