Project Center
Approved changes feed: RSS · Atom
cpe:2.3:a:newforma:project_center:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Newforma (570ddfef-6be9-52a4-8457-d9e784e0d82f) |
|---|---|
| Product | Project Center (4c1dd293-282d-5cf3-af7c-61e03922d833) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-35062 |
vulnerable | 2026-06-08 07:20:59.863279 |
Newforma Info Exchange (NIX) default anonymous access
MEDIUM (5.3)
Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vulnerabilities that require authentication.
Published: 2025-10-09T20:22:23.136Z
Updated: 2025-10-10T19:30:03.326Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35061 |
vulnerable | 2026-06-08 07:20:59.862860 |
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx
MEDIUM (5.9)
Newforma Info Exchange (NIX) '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the user-configured NIX service account.
Published: 2025-10-09T20:22:37.069Z
Updated: 2025-10-10T19:25:07.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35060 |
vulnerable | 2026-06-08 07:20:59.862476 |
Newforma Info Exchange (NIX) stored XSS via SVG file upload
MEDIUM (5.5)
Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.
Published: 2025-10-09T20:22:10.025Z
Updated: 2025-10-10T19:30:43.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35059 |
vulnerable | 2026-06-08 07:20:59.862079 |
Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx
MEDIUM (4.3)
Newforma Info Exchange (NIX) '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter.
Published: 2025-10-09T20:21:56.759Z
Updated: 2025-10-10T19:32:28.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35058 |
vulnerable | 2026-06-08 07:20:59.861782 |
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx
MEDIUM (5.9)
Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the customer-configured NIX service account.
Published: 2025-10-09T20:21:43.176Z
Updated: 2025-10-10T19:32:49.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35057 |
vulnerable | 2026-06-08 07:20:59.861327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35056 |
vulnerable | 2026-06-08 07:20:59.861039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35055 |
vulnerable | 2026-06-08 07:20:59.860747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35054 |
vulnerable | 2026-06-08 07:20:59.860434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35053 |
vulnerable | 2026-06-08 07:20:59.860008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35052 |
vulnerable | 2026-06-08 07:20:59.859589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35051 |
vulnerable | 2026-06-08 07:20:59.859232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35050 |
vulnerable | 2026-06-08 07:20:59.857210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32499 |
vulnerable | 2026-06-08 06:35:33.230139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.