← Back

Work Flow Engine

work_flow_engine

Vendor: Openwfe • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Openwfe
1Work Flow Engine
Apr 16, 2026
Oct 25, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
1Openwfe
1Work Flow Engine
Apr 16, 2026
Oct 25, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.