Skip to content
OpenAdvisories

Vendor

Weaver Network

9 known vulnerabilities.

Products

E-cology 5 E-cology 8.0 2 E-cology 9.0 2 E-office 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-4995

    Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

    Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/ut…

    Weaver Network E-cology 9.0
  • Critical 9.8
    CVE-2022-50993

    Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

    Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary f…

    Weaver Network E-office
  • Critical 9.8
    CVE-2026-22679 Public exploit EPSS 21%

    Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

    Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arbitrary commands by invoking exposed deb…

    Weaver Network E-cology