Newforma Project Center vulnerabilities

• newforma project center Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx CVE-2025-35061 8.2 HighOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) default anonymous access CVE-2025-35062 6.9 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) stored XSS via SVG file upload CVE-2025-35060 5.1 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx CVE-2025-35059 5.3 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx CVE-2025-35058 8.2 HighOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx CVE-2025-35057 6.0 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) limited file read CVE-2025-35056 5.3 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) insecure file upload CVE-2025-35055 8.7 HighOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) insufficiently protected credentials CVE-2025-35054 4.8 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) arbitrary file read and delete CVE-2025-35053 6.1 MediumOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) shared hard-coded secret key CVE-2025-35052 6.3 MediumOctober 9, 2025
• newforma project center Newforma Project Center Server (NPCS) .NET unauthenticated deserialization CVE-2025-35051 7.7 HighOctober 9, 2025
• newforma project center Newforma Info Exchange (NIX) .NET unauthenticated deserialization CVE-2025-35050 9.3 CriticalOctober 9, 2025
• newforma project center server, project center +1 more Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET... CVE-2024-32499 4.9 MediumApril 28, 2025