Newforma Project Center Server Open Redirect Vulnerability

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An open redirection vulnerability exists in Newforma Project...

CVE-2025-35059

Newforma Info Exchange NIX '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter...

CVE-2025-35059 Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx

Newforma Info Exchange NIX '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl' parameter...

CVE-2025-35059

Newforma Info Exchange (NIX) exposes an open redirect vulnerability via the unauthenticated nhl parameter in the endpoint /DownloadWeb/hyperlinkredirect.aspx. Multiple sources (CNVD-2025-25475, RH/CVE-2025-35059, EUVD-2025-33568, NVD, CNNVD, etc.) describe an open redirection that can be triggere...

PT-2025-41475

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description The software contains an unauthenticated URL redirect issue via the /DownloadWeb/hyperlinkredirect.aspx API endpoint. The nhl parameter is susceptible to manipulation,...