CVE-2022-47072

CVE-2022-47072 is a critical SQL injection vulnerability affecting Sparx Systems Enterprise Architect 16.0.1605 32-bit. This flaw allows unauthenticated attackers to execute arbitrary SQL commands by manipulating the "Find" parameter in the "Select Classifier" dialog box. With a CVSS score of 9.8 (CRITICAL), successful exploitation can lead to complete compromise of confidentiality, integrity, and availability of the affected system. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.