Openwfe

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Openwfe records in CISA KEV

No Openwfe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Work Flow Engine 2 records LOW

Records

2 records in Work Flow Engine · all components

TI-2004-01507 CVE-2004-1631 · GHSA-6r6r-2p6c-hcvv

Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of…

LOW 26

Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2005-02-20 No fix listed

TI-2004-01506 CVE-2004-1630 · GHSA-v2px-5cf8-vr46

Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine…

LOW 23

Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0127 Published 2005-02-20 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0