Newforma Project Center vulnerabilities
13 published CVEs name Newforma Project Center among the affected products.
- Published CVEs
- 13
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 4Medium 8Low 0Not scored 0
Newest CVEs
- CVE-2025-35061
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx
Newforma · Project Center
High8.2 - CVE-2025-35062
Newforma Info Exchange (NIX) default anonymous access
Newforma · Project Center
Medium6.9 - CVE-2025-35060
Newforma Info Exchange (NIX) stored XSS via SVG file upload
Newforma · Project Center
Medium5.1 - CVE-2025-35059
Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx
Newforma · Project Center
Medium5.3 - CVE-2025-35058
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx
Newforma · Project Center
High8.2 - CVE-2025-35057
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx
Newforma · Project Center
Medium6.0 - CVE-2025-35056
Newforma Info Exchange (NIX) limited file read
Newforma · Project Center
Medium5.3 - CVE-2025-35055
Newforma Info Exchange (NIX) insecure file upload
Newforma · Project Center
High8.7 - CVE-2025-35054
Newforma Info Exchange (NIX) insufficiently protected credentials
Newforma · Project Center
Medium4.8 - CVE-2025-35053
Newforma Info Exchange (NIX) arbitrary file read and delete
Newforma · Project Center
Medium6.1