Priority HIGH 81
Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arb…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.20692 · Published 2026-04-07 · Fixed in 20260312 CWE-306
Priority HIGH 77
A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.02117 · Published 2025-06-24 · No fix listed CWE-89
Priority MEDIUM 49
Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fro…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00446 · Published 2024-11-19 · No fix listed CWE-89
Priority LOW 30
E-cology has a directory traversal vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00866 · Published 2024-11-19 · No fix listed CWE-22
Priority MEDIUM 50
An issue in Weaver E-cology v.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00718 · Published 2024-11-19 · No fix listed CWE-94
Priority MEDIUM 49
A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2024-11-19 · No fix listed CWE-362
Priority HIGH 70
A vulnerability was found in Weaver e-cology 8.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00778 · Published 2024-08-12 · No fix listed CWE-200
Priority MEDIUM 51
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2024-01-20 · No fix listed
Priority MEDIUM 43
A vulnerability was found in Weaver e-cology.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-20 · No fix listed CWE-89
Priority MEDIUM 40
A vulnerability classified as problematic was found in Weaver e-cology up to 9.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00984 · Published 2023-05-19 · No fix listed CWE-611
Priority LOW 28
An issue was discovered in Weaver e-cology 9.0.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00685 · Published 2019-04-30 · No fix listed CWE-93
THREATIST.IORead the docs