Priority HIGH 81
Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arb…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.20692 · Published 2026-04-07 · Fixed in 20260312 CWE-306
Priority HIGH 77
A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.02117 · Published 2025-06-24 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in Weaver E-Office 9.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.28478 · Published 2023-05-11 · No fix listed CWE-434
Priority HIGH 70
A vulnerability was found in Weaver e-cology 8.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00778 · Published 2024-08-12 · No fix listed CWE-200
Priority HIGH 67
A vulnerability was found in Weaver E-Office 9.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.32895 · Published 2023-05-04 · No fix listed CWE-434
Priority HIGH 65
A vulnerability was found in Weaver OA 9.5 and classified as problematic.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.54232 · Published 2023-05-17 · No fix listed CWE-552
Priority MEDIUM 56
A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00269 · Published 2025-08-28 · No fix listed CWE-79
Priority MEDIUM 51
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2024-01-20 · No fix listed
Priority MEDIUM 50
An issue in Weaver E-cology v.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00718 · Published 2024-11-19 · No fix listed CWE-94
Priority MEDIUM 50
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00776 · Published 2023-07-25 · No fix listed CWE-434
Priority MEDIUM 49
Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fro…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00446 · Published 2024-11-19 · No fix listed CWE-89
Priority MEDIUM 49
A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2024-11-19 · No fix listed CWE-362
Priority MEDIUM 48
A vulnerability was found in Weaver E-Office 9.5 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.07008 · Published 2023-05-11 · No fix listed CWE-77
Priority MEDIUM 44
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJ…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00356 · Published 2026-10-02 · No fix listed CWE-918
Priority MEDIUM 43
A vulnerability was found in Weaver e-cology.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-20 · No fix listed CWE-89
Priority MEDIUM 40
A vulnerability classified as problematic was found in Weaver e-cology up to 9.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00984 · Published 2023-05-19 · No fix listed CWE-611
Priority LOW 37
A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02182 · Published 2023-05-17 · No fix listed CWE-36
Priority LOW 33
A vulnerability was found in Panwei eoffice OA up to 9.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00955 · Published 2024-04-03 · No fix listed CWE-24
Priority LOW 31
An issue was discovered in eteams OA v4.0.34.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01025 · Published 2019-09-09 · No fix listed CWE-613
Priority LOW 30
E-cology has a directory traversal vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00866 · Published 2024-11-19 · No fix listed CWE-22
Priority LOW 28
An issue was discovered in Weaver e-cology 9.0.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00685 · Published 2019-04-30 · No fix listed CWE-93
THREATIST.IORead the docs