en
Weaver Network Co., Ltd. develops the e-cology enterprise collaboration platform and related workflow automation tools. The product line is marketed to organizations seeking digital transformation through document management, process orchestration, and cross-system collaboration. It is typically delivered as on-premises or cloud-enabled software suite for enterprise users including admins, IT, and departmental staff.
Official website · weaver.com.cnThe GCVE catalog currently lists 6 vulnerability records associated with Weaver Network Co., Ltd..
Among the 6 records analyzed by CyStack, 6 are High or Critical and 0 appear in the CISA KEV catalog for priority remediation.
Weaver Network Co., Ltd. is the developer behind the e-cology family of enterprise collaboration software. The company operates as a regional to multinational software vendor focused on administrative workflow, document management, and collaboration platforms for businesses. Its e-cology line is marketed for organizational digitalization and workflow automation across campuses, offices, and remote sites. The group maintains a public presence via its Chinese site and global product pages demonstrating a broad geographic reach in Asia and beyond.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
Severity across 6 analyzed records
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2022-50997Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp | Exploitation statusPublic exploit | FixYes | Affected productE-cology 9.0 | Published08/11/2026 | SeverityHigh |
CVE-2016-20097Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad | Exploitation statusPublic exploit | FixYes | Affected productE-cology 8.0 | Published08/11/2026 | SeverityHigh |
CVE-2022-4995Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp | Exploitation statusPublic exploit | FixYes | Affected productE-cology 9.0 | Published08/07/2026 | SeverityCritical |
CVE-2022-50992Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet | Exploitation statusPublic exploit | FixYes | Affected productE-cology | Published04/30/2026 | SeverityHigh |
CVE-2022-50993Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet | Exploitation statusPublic exploit | FixYes | Affected productE-office | Published04/30/2026 | SeverityCritical |
CVE-2026-22679Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint | Exploitation statusPublic exploit | FixYes | Affected productE-cology | Published04/07/2026 | SeverityCritical |
