CVE-2004-1631: Openwfe Work Flow Engine

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.

Affected products

• Openwfe Work Flow Engine: version 1.4 only; version 1.4.1 only; version 1.4.2 only; version 1.4.3 only; version 1.4.4 only; version 1.4.5 only

Published 2004-10-25. Last modified 2026-06-16.