qoca aim vulnerabilities and fixes

Recent CVEs affecting qoca aim, with upgrade or downgrade steps. 6 tracked.

Also searched as: qocaaim.

qoca aim has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-05. Highest priority: CVE-2025-15240 (score 42/100).

• CVE-2025-15240 HIGH 8.8 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, al
• CVE-2025-15238 MEDIUM 6.5 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing au
• CVE-2025-15239 MEDIUM 6.5 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing au
• CVE-2025-15235 MEDIUM 6.5 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, all
• CVE-2025-15236 MEDIUM 4.3 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing a
• CVE-2025-15237 MEDIUM 4.3 UPGRADE QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing a

FAQ

How do I fix qoca aim vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is qoca aim being exploited right now?

None of the tracked qoca aim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which qoca aim CVE should I patch first?

CVE-2025-15240 currently ranks highest (42/100): QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, al.

RSS feed for qoca aim · ← Back to latest CVEs