Advisories · Technology

Weaver Network Co., Ltd. E-cology.

Every CVE that names Weaver Network Co., Ltd. E-cology among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-71434 CVE record

CVSS 8.8 High

Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list
- Weaver Network Co., Ltd. E-cology
- SQL injection
Not analysed yet 22 Oct 2026
CVE-2021-48013 CVE record

CVSS 8.7 High

Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload
- Weaver Network Co., Ltd. E-cology
- Path traversal
Not analysed yet 22 Oct 2026
CVE-2019-25776 CVE record

CVSS 8.7 High

Weaver E-cology SQL Injection via SyncUserInfo.jsp
- Weaver Network Co., Ltd. E-cology
- SQL injection
Not analysed yet 18 Sept 2026
CVE-2022-50992 CVE record

CVSS 8.7 High

Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet
- Weaver Network Co., Ltd. E-cology
- Path traversal
Not analysed yet 30 Apr 2026
CVE-2026-22679 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint
- Weaver Network Co., Ltd. E-cology
- Authentication bypass
Not analysed yet 7 Apr 2026