Skip to content
OpenAdvisories

Vendor

Newforma

14 known vulnerabilities.

Products

Project Center 13 Project Center Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-35051

    Newforma Project Center Server (NPCS) .NET unauthenticated deserialization

    Newforma Project Center Server (NPCS) accepts serialized .NET data via the '/ProjectCenter.rem' endpoint on 9003/tcp, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. According to the recomme…

    Newforma Project Center
  • Critical 9.8
    CVE-2025-35050

    Newforma Info Exchange (NIX) .NET unauthenticated deserialization

    Newforma Info Exchange (NIX) accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newform…

    Newforma Project Center