Qoca Aim

qoca_aim

Vendor: Quantatw • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-15240 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 8.7 HIGH· v4 8.8 HIGH· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary co...Show more QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.Show less
CVE-2025-15239 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 7.1 HIGH· v4 6.5 MEDIUM· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-15238 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 7.1 HIGH· v4 6.5 MEDIUM· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-15237 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 5.3 MEDIUM· v4 4.3 MEDIUM· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Tra...Show more QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability.Show less
CVE-2025-15236 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 5.3 MEDIUM· v4 4.3 MEDIUM· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Tra...Show more QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability.Show less
CVE-2025-15235 1Quantatw 1Qoca Aim Jan 20, 2026 Jan 5, 2026 7.1 HIGH· v4 6.5 MEDIUM· v3 N/A· v2 QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system fun...Show more QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files.Show less