All 7 CVE vulnerabilities found in e-cology, with AI-generated Chinese analysis, references, and POCs.
Vendor: Weaver
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2019-25776 | Weaver E-cology SQL Injection via SyncUserInfo.jsp CWE-89 | 7.5 | High | 2026-09-18 |
| CVE-2022-50992 | Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet CWE-22 | 7.5 | High | 2026-04-30 |
| CVE-2026-22679 | Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint CWE-306 | 9.8 | Critical | 2026-04-07 |
| CVE-2025-34038 | Weaver E-cology SQL Injection CWE-89 | 9.1AI | Critical AI | 2025-06-24 |
| CVE-2024-7704 | Weaver e-cology Source Code ecology_dev.zip information disclosure CWE-200 | 5.3 | Medium | 2024-08-12 |
| CVE-2023-3793 | Weaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injection CWE-89 | 5.5 | Medium | 2023-07-20 |
| CVE-2023-2806 | Weaver e-cology API RequestInfoByXml xml external entity reference CWE-611 | 5.5 | Medium | 2023-05-19 |
All 7 known CVE vulnerabilities affecting e-cology with full Chinese analysis, references, and POCs where available.