组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| Weaver E-Cology JqueryFileTree - Directory Traversal | 中危 | — | — | PoCEXP | ||
| OA E-Weaver SignatureDownLoad - Arbitrary File Read | 高危 | — | — | PoCEXP | ||
| Weaver E-Cology `getsqldata` - SQL Injection | 高危 | — | — | PoCEXP | ||
| Ecology Syncuserinfo - SQL Injection | 严重 | 10.0 | — | PoCEXP | ||
| OA E-Cology LoginSSO.jsp - SQL Injection | 高危 | — | — | PoCEXP | ||
| E-cology RCE | 严重 | — | — | PoCEXP | ||
| Fanwei e-cology <=9.0 - Remote Code Execution | 严重 | 10.0 | — | PoCEXP |