CVE-2025-4376 Information

Description

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server’s WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.

Reference

https://sparxsystems.com/products/procloudserver/6.1/