Weaver E Cology
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Weaver E Cology.
By the Year
In 2026 there have been 0 vulnerabilities in Weaver E Cology. E Cology did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 5 | 8.65 |
| 2023 | 2 | 9.30 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 1 | 6.10 |
It may take a day or so for new E Cology vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Weaver E Cology Security Vulnerabilities
SQL Injection Vulnerability in Weaver Ecology v9.* via MECAction Servlet
CVE-2024-48072
- November 19, 2024
Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fromTable=HrmResourceManager&whereClause=1%3d1&triggerCondition=1&expression=%3d&fieldValue=1.
SQL Injection Vulnerability in Weaver Ecology v9*
CVE-2024-48070
- November 19, 2024
An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges
Weaver Ecology v9.* Remote Code Execution via File Upload
CVE-2024-48069
- November 19, 2024
A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges
Weaver e-cology 8 Source Code Handler Remote Info Disclosure
CVE-2024-7704
7.5 - High
- August 12, 2024
A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecology_dev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Information Disclosure
Remote code exec via crafted script in Weaver e-Cology FrameworkShellController
CVE-2023-51892
9.8 - Critical
- January 20, 2024
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
Weaver e-cology SQLi via HTTP POST before 10.58.0
CVE-2023-3793
9.8 - Critical
- July 20, 2023
A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql injection. Upgrading to version 10.58.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-235061 was assigned to this vulnerability.
SQL Injection
Weaver e-cology 9.0 XXE via RequestInfoByXml (CVE-2023-2806)
CVE-2023-2806
8.8 - High
- May 19, 2023
A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
XXE
An issue was discovered in Weaver e-cology 9.0
CVE-2019-10272
6.1 - Medium
- April 30, 2019
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.
CRLF Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Weaver E Cology or by Weaver? Click the Watch button to subscribe.
