Read the docs

Weaver

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Weaver records in CISA KEV

No Weaver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-cology 11 records HIGH E-office 6 records HIGH Eteams Oa 1 record LOW

Records

11 records in E-cology · all components

TI-2026-18207 CVE-2026-22679 · GHSA-vg4v-xjcr-x7p5

Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

Priority HIGH 81

Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arb…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.20692 Published 2026-04-07 Fixed in 20260312 CWE-306
TI-2025-24207 CVE-2025-34038 · GHSA-3464-wq8g-r9gp

Weaver E-cology SQL Injection

Priority HIGH 77

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02117 Published 2025-06-24 No fix listed CWE-89
TI-2024-32260 CVE-2024-48070 · GHSA-xvcg-crx7-qcjv

An issue in Weaver E-cology v.

Priority MEDIUM 50

An issue in Weaver E-cology v.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2024-11-19 No fix listed CWE-94
TI-2024-32262 CVE-2024-48072 · GHSA-rf66-cpg6-q99p

Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the…

Priority MEDIUM 49

Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00446 Published 2024-11-19 No fix listed CWE-89
Open these records in search →