Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Newforma Project Center 2023.1 Clear all filters
TI-2025-24580 CVE-2025-35062 · GHSA-7vv3-f3c9-f6v6

Newforma Info Exchange (NIX) default anonymous access

Priority HIGH 70

Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00368 Published 2025-10-09 Fixed in 2023.1 CWE-276
TI-2025-24573 CVE-2025-35055 · GHSA-pv37-mf6h-p9j8

Newforma Info Exchange (NIX) insecure file upload

Priority MEDIUM 40

Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00552 Published 2025-10-09 Fixed in 2023.1 CWE-22