Skip to content
OpenAdvisories

Product · Weaver Network

E-office

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-50993

    Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

    Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary f…

    Weaver Network E-office