Vulnerabilities

TI-2025-24579 CVE-2025-35061 · GHSA-vwc9-ghvr-rp96

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx

LOW 36

Newforma Info Exchange (NIX) '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00379 Published 2025-10-09 Fixed in 2023.2 CWE-294

TI-2025-24576 CVE-2025-35058 · GHSA-xxg7-747h-w72j

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx

LOW 36

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00379 Published 2025-10-09 Fixed in 2023.2 CWE-294

Vulnerabilities

Filters

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx