Weaver

Products

Product	CVEs	Exploited	Latest
E-cology	4	–	Jun 24, 2025
E-Office	3	–	May 11, 2023
OA	2	–	May 17, 2023
e-Bridge	1	–	Oct 2, 2026
E-Mobile Mobile Management Platform	1	–	Aug 28, 2025

CVE-2020-37278 High 7.5 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile 0.4%
CVE-2025-9590 Low 3.5 Weaver E-Mobile Mobile Management Platform cross site scripting 0.3%
CVE-2025-34038 High 8.7 Weaver E-cology SQL Injection 2.1%
CVE-2024-7704 Medium 5.3 Weaver e-cology Source Code ecology_dev.zip information disclosure 0.8%
CVE-2023-3793 Medium 5.5 Weaver e-cology HTTP POST Request filelFileDownloadForOutDoc.class sql injection 0.5%
CVE-2023-2806 Medium 5.5 Weaver e-cology API RequestInfoByXml xml external entity reference 1.0%
CVE-2023-2766 Medium 5.3 Weaver OA jx2_config.ini file access 54.2%
CVE-2023-2765 Medium 4.3 Weaver OA downfile.php absolute path traversal 2.2%
CVE-2023-2648 Medium 6.3 Weaver E-Office uploadify.php unrestricted upload 28.5%
CVE-2023-2647 Medium 6.3 Weaver E-Office File Upload utility_all.php command injection 7.0%
CVE-2023-2523 High 7.3 Weaver E-Office unrestricted upload 32.9%