Newforma — Vulnerabilities & Security Advisories 14

Newforma provides project information management software for architecture, engineering, and construction industries. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and authentication flaws. The platform has faced security incidents, including a 2021 vulnerability (CVE-2021-42312) allowing unauthorized access to project data. Security characteristics include integration with multiple third-party systems, increasing attack surface. While the company has addressed vulnerabilities through patches, the consistent presence of flaws in web interfaces and APIs suggests ongoing need for robust security testing in this specialized software sector.