CVE-2025-35055HIGH 8.8EPSS p38.3%

CVE-2025-35055CVE-2025-35055

Description

Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete directories. In Newforma before 2023.1, anonymous access is enabled by default (CVE-2025-35062), allowing an otherwise unauthenticated attacker to effectively authenticate as 'anonymous' and exploit this file upload vulnerability.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.49% probability of exploitation · percentile 38.3% · 2026-06-18T12:00:27Z
Published2025-10-09
Last modified2025-10-22

Underlying weaknesses· 2

CWE-22CWE-434

References

  1. https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json
  2. https://www.cve.org/CVERecord?id=CVE-2025-35055
  3. https://www.cve.org/CVERecord?id=CVE-2025-35062

2

TypeTargetConfidenceTier
WeaknessImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-220%live
WeaknessUnrestricted Upload of File with Dangerous Typecwe-4340%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-35062
CVE
CVE-2025-35050
CVE
CVE-2025-57794
CVE
CVE-2025-59818
CVE
CVE-2025-8450
CVE
CVE-2025-2396
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.