Read the docs

Newforma

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Newforma records in CISA KEV

No Newforma vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Project Center 14 records HIGH

Records

14 records in Project Center · all components

TI-2025-24580 CVE-2025-35062 · GHSA-7vv3-f3c9-f6v6

Newforma Info Exchange (NIX) default anonymous access

Priority HIGH 70

Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00368 Published 2025-10-09 Fixed in 2023.1 CWE-276
TI-2025-24568 CVE-2025-35050 · GHSA-jhgx-w5f9-vrmh

Newforma Info Exchange (NIX) .NET unauthenticated deserialization

Priority MEDIUM 50

Newforma Info Exchange (NIX) accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00923 Published 2025-10-09 No fix listed CWE-306
TI-2025-24573 CVE-2025-35055 · GHSA-pv37-mf6h-p9j8

Newforma Info Exchange (NIX) insecure file upload

Priority MEDIUM 40

Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00552 Published 2025-10-09 Fixed in 2023.1 CWE-22
TI-2025-24569 CVE-2025-35051 · GHSA-gm5v-4gx5-3983

Newforma Project Center Server (NPCS) .NET unauthenticated deserialization

Priority LOW 37

Newforma Project Center Server (NPCS) accepts serialized .NET data via the '/ProjectCenter.rem' endpoint on 9003/tcp, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkServic…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00839 Published 2025-10-09 No fix listed CWE-306
TI-2025-24571 CVE-2025-35053 · GHSA-22mx-5372-vwv3

Newforma Info Exchange (NIX) arbitrary file read and delete

Priority LOW 27

Newforma Info Exchange (NIX) accepts requests to '/UserWeb/Common/MarkupServices.ashx' specifying the 'DownloadExportedPDF' command that allow an authenticated user to read and delete arbitrary files with 'NT AUTHORITY\N…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00415 Published 2025-10-09 No fix listed CWE-22
TI-2025-24574 CVE-2025-35056 · GHSA-7cq8-vqmc-75p3

Newforma Info Exchange (NIX) limited file read

Priority LOW 24

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and returns an image of the specified file.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00362 Published 2025-10-09 Fixed in 2024.1 CWE-22
TI-2025-24578 CVE-2025-35060 · GHSA-h75v-vvch-93vf

Newforma Info Exchange (NIX) stored XSS via SVG file upload

Priority LOW 23

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web b…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0022 Published 2025-10-09 Fixed in 2024.1 CWE-79
TI-2025-24572 CVE-2025-35054 · GHSA-hg8f-f9vp-h6j2

Newforma Info Exchange (NIX) insufficiently protected credentials

Priority LOW 21

Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00082 Published 2025-10-09 No fix listed CWE-257
Open these records in search →