What’s Vulnerable › Products

Newforma Project Center vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Newforma Project Center version is affected

Latest Newforma Project Center vulnerabilities

• CVE-2025-35062 — Newforma Info Exchange (NIX) default anonymous access (CVSS 9.8)
• CVE-2025-35061 — Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx (CVSS 5.9)
• CVE-2025-35060 — Newforma Info Exchange (NIX) stored XSS via SVG file upload (CVSS 5.4)
• CVE-2025-35059 — Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx (CVSS 6.1)
• CVE-2025-35058 — Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx (CVSS 5.9)
• CVE-2025-35057 — Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx (CVSS 5.3)
• CVE-2025-35056 — Newforma Info Exchange (NIX) limited file read (CVSS 5.0)
• CVE-2025-35055 — Newforma Info Exchange (NIX) insecure file upload (CVSS 8.8)
• CVE-2025-35054 — Newforma Info Exchange (NIX) insufficiently protected credentials (CVSS 5.3)
• CVE-2025-35053 — Newforma Info Exchange (NIX) arbitrary file read and delete (CVSS 6.4)
• CVE-2025-35052 — Newforma Info Exchange (NIX) shared hard-coded secret key (CVSS 5.3)
• CVE-2025-35051 — Newforma Project Center Server (NPCS) .NET unauthenticated deserialization (CVSS 9.8)
• CVE-2025-35050 — Newforma Info Exchange (NIX) .NET unauthenticated deserialization (CVSS 9.8)
• CVE-2024-32499 — (CVSS 9.8)