Skip to content
Newforma vulnerabilities
Newest
-
newforma project center
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx
CVE-2025-35061
8.2 High
-
newforma project center
Newforma Info Exchange (NIX) default anonymous access
CVE-2025-35062
6.9 Medium
-
newforma project center
Newforma Info Exchange (NIX) stored XSS via SVG file upload
CVE-2025-35060
5.1 Medium
-
newforma project center
Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx
CVE-2025-35059
5.3 Medium
-
newforma project center
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx
CVE-2025-35058
8.2 High
-
newforma project center
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx
CVE-2025-35057
6.0 Medium
-
newforma project center
Newforma Info Exchange (NIX) limited file read
CVE-2025-35056
5.3 Medium
-
newforma project center
Newforma Info Exchange (NIX) insecure file upload
CVE-2025-35055
8.7 High
-
newforma project center
Newforma Info Exchange (NIX) insufficiently protected credentials
CVE-2025-35054
4.8 Medium
-
newforma project center
Newforma Info Exchange (NIX) arbitrary file read and delete
CVE-2025-35053
6.1 Medium
-
newforma project center
Newforma Info Exchange (NIX) shared hard-coded secret key
CVE-2025-35052
6.3 Medium
-
newforma project center
Newforma Project Center Server (NPCS) .NET unauthenticated deserialization
CVE-2025-35051
7.7 High
-
newforma project center
Newforma Info Exchange (NIX) .NET unauthenticated deserialization
CVE-2025-35050
9.3 Critical
-
newforma project center server, project center +1 more
Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET...
CVE-2024-32499
4.9 Medium