How many CVEs does Newforma have?

Newforma has 14 published CVE records since 2025, including 14 in the last two years.

How many Newforma CVEs are in CISA KEV?

None of Newforma's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Newforma products have the most CVEs?

The Newforma products with the most published CVEs are Project Center, Info Exchange (NIX), Newforma Info Exchange (NIX), Newforma Project Center, Project Center Server.

What are the most common weakness types in Newforma CVEs?

Newforma's CVEs most often map to these CWE weakness types: CWE-294 (Authentication Bypass by Capture-replay), CWE-306 (Missing Authentication for Critical Function), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-522 (Insufficiently Protected Credentials).

Are there public exploits for Newforma vulnerabilities?

Yes — 1 of Newforma's CVEs have a known public exploit.

How many critical Newforma vulnerabilities are there?

Newforma has 2 critical and 4 high-severity CVEs.

What is the average severity of Newforma CVEs?

The average CVSS base score across Newforma's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

14 CVEs

Newforma Vulnerabilities

Name: Newforma vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Newforma.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.0

Avg CVSS

2025–2025

Overview

Newforma has 14 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Newforma products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Newforma's vulnerability posture, as a share of its 14 published CVEs.

Average CVSS: 7.0
Critical / high: 43%
Actively exploited (KEV): 0%
Public exploit available: 7%
Patch available: 64%

Severity and exploitation

How the CVSS severity of Newforma's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High4

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Newforma's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Newforma's CVEs has a known public exploit available.

Most affected products

The Newforma products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Newforma CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Newforma CVE records.

Latest Newforma CVEs

The most recently disclosed vulnerabilities affecting Newforma.

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx
CWE-294
High · CVSS 8.2
EPSS 0.4%2025-10-09
Newforma Info Exchange (NIX) default anonymous access
CWE-276
Medium · CVSS 6.9
EPSS 0.3%2025-10-09
Newforma Info Exchange (NIX) stored XSS via SVG file upload
CWE-79
Medium · CVSS 5.1
EPSS 0.2%2025-10-09
Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx
CWE-601
Medium · CVSS 5.3
EPSS 0.2%2025-10-09
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx
CWE-294
High · CVSS 8.2
EPSS 0.4%2025-10-09
Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx
CWE-294
Medium · CVSS 6.0
EPSS 0.3%2025-10-09
Newforma Info Exchange (NIX) limited file read
CWE-22
Medium · CVSS 5.3
EPSS 0.3%2025-10-09
Newforma Info Exchange (NIX) insecure file upload
CWE-22
High · CVSS 8.7
EPSS 0.5%2025-10-09
Newforma Info Exchange (NIX) insufficiently protected credentials
CWE-522
Medium · CVSS 4.8
EPSS 0.1%2025-10-09
Newforma Info Exchange (NIX) arbitrary file read and delete
CWE-73
Medium · CVSS 6.1
EPSS 0.4%2025-10-09
Newforma Info Exchange (NIX) shared hard-coded secret key
CWE-321
Medium · CVSS 6.3
EPSS 0.3%2025-10-09
Newforma Project Center Server (NPCS) .NET unauthenticated deserialization
CWE-306
High · CVSS 7.7
EPSS 0.8%2025-10-09

Track new Newforma CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Newforma CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,677 CVEs linux22,794 CVEs Google16,507 CVEs Apple15,096 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,120 CVEs

Browse all vendors

Frequently asked questions

Common questions about Newforma vulnerabilities.

How many CVEs does Newforma have?: Newforma has 14 published CVE records since 2025, including 14 in the last two years.
How many Newforma CVEs are in CISA KEV?: None of Newforma's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Newforma products have the most CVEs?: The Newforma products with the most published CVEs are Project Center, Info Exchange (NIX), Newforma Info Exchange (NIX), Newforma Project Center, Project Center Server.
What are the most common weakness types in Newforma CVEs?: Newforma's CVEs most often map to these CWE weakness types: CWE-294 (Authentication Bypass by Capture-replay), CWE-306 (Missing Authentication for Critical Function), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-522 (Insufficiently Protected Credentials).
Are there public exploits for Newforma vulnerabilities?: Yes — 1 of Newforma's CVEs have a known public exploit.
How many critical Newforma vulnerabilities are there?: Newforma has 2 critical and 4 high-severity CVEs.
What is the average severity of Newforma CVEs?: The average CVSS base score across Newforma's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Newforma vulnerabilities

Monitor new Newforma vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing