CVE-2025-4376: Cross-Site Scripting vulnerability in Model Search in Pro Cloud Server's WebEA
Published May 9, 2025
·Updated
Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS).
This issue affects Pro Cloud Server: earlier than 6.0.165.
Affected Software
1 affected component
Sparx Systems Pro Cloud Server<6.0.165
Event History
May 9, 2025
CVE Published
via MITRE·05:12 AM
Data Sourced
via MITRE·05:12 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4376?
CVE-2025-4376 is considered a moderate severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-4376?
To fix CVE-2025-4376, upgrade Sparx Systems Pro Cloud Server to version 6.0.165 or later.
3
What type of vulnerability is CVE-2025-4376?
CVE-2025-4376 is classified as an Improper Input Validation vulnerability.
4
What impact does CVE-2025-4376 have on users?
CVE-2025-4376 can allow attackers to execute arbitrary scripts in the context of a victim's browser, potentially compromising user data.
5
Which versions of Pro Cloud Server are affected by CVE-2025-4376?
CVE-2025-4376 affects all versions of Sparx Systems Pro Cloud Server earlier than 6.0.165.