Skip to content
OpenAdvisories

Vendor

efwGrp

4 known vulnerabilities.

Products

efw4.X 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2026-44259

    efw4.X: Stored XSS via previewServlet

    efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME type based on file extension, without any content sanitization or security headers. Files with .html, .htm, or .svg extensions are served as…

    efwGrp efw4.X