Skip to contentNewforma Project Center vulnerabilities
- newforma project centerNewforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmxCVE-2025-350618.2 High
- newforma project centerNewforma Info Exchange (NIX) default anonymous accessCVE-2025-350626.9 Medium
- newforma project centerNewforma Info Exchange (NIX) stored XSS via SVG file uploadCVE-2025-350605.1 Medium
- newforma project centerNewforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspxCVE-2025-350595.3 Medium
- newforma project centerNewforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashxCVE-2025-350588.2 High
- newforma project centerNewforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashxCVE-2025-350576.0 Medium
- newforma project centerNewforma Info Exchange (NIX) limited file readCVE-2025-350565.3 Medium
- newforma project centerNewforma Info Exchange (NIX) insecure file uploadCVE-2025-350558.7 High
- newforma project centerNewforma Info Exchange (NIX) insufficiently protected credentialsCVE-2025-350544.8 Medium
- newforma project centerNewforma Info Exchange (NIX) arbitrary file read and deleteCVE-2025-350536.1 Medium
- newforma project centerNewforma Info Exchange (NIX) shared hard-coded secret keyCVE-2025-350526.3 Medium
- newforma project centerNewforma Project Center Server (NPCS) .NET unauthenticated deserializationCVE-2025-350517.7 High
- newforma project centerNewforma Info Exchange (NIX) .NET unauthenticated deserializationCVE-2025-350509.3 Critical
- newforma project center server, project center +1 moreNewforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET...CVE-2024-324994.9 Medium