CVE-2025-15236— Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-15236
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
绝对路径遍历
Source: NVD (National Vulnerability Database)
Vulnerability Title
Quanta QOCA aim AI Medical Cloud Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Quanta QOCA aim AI Medical Cloud Platform是中国台湾广达（Quanta）公司的一个人工智能医疗云计算整合平台，提供全面的AI模型开发工具，涵盖从AI开发到临床应用的全过程。 Quanta QOCA aim AI Medical Cloud Platform存在安全漏洞，该漏洞源于绝对路径遍历，可能导致经过身份验证的远程攻击者读取指定路径下的文件夹名称。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Quanta Computer | QOCA aim AI Medical Cloud Platform | 0 ~ 2.7.5 | - |
II. Public POCs for CVE-2025-15236
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-15236
请登录查看更多情报信息。
- https://www.twcert.org.tw/en/cp-139-10616-cd942-2.htmlthird-party-advisory
- https://www.twcert.org.tw/tw/cp-132-10615-157a3-1.htmlthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-15236
Same Patch Batch · Quanta Computer · 2026-01-05 · 6 CVEs total
| CVE-2025-15240 | 8.8 HIGH | Quanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitrary File Upload |
| CVE-2025-15235 | 6.5 MEDIUM | Quanta Computer｜QOCA aim AI Medical Cloud Platform - Missing Authorization |
| CVE-2025-15239 | 6.5 MEDIUM | Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Injection |
| CVE-2025-15238 | 6.5 MEDIUM | Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Injection |
| CVE-2025-15237 | 4.3 MEDIUM | Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Traversal |
IV. Related Vulnerabilities
Same product: QOCA aim AI Medical Cloud Platform
- CVE-2025-15240
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitra - CVE-2025-15239
Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Inj - CVE-2025-15238
Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Inj - CVE-2025-15237
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Tr - CVE-2025-15235
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Missing
Same vendor: Quanta Computer
- CVE-2025-15240
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitra - CVE-2025-15239
Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Inj - CVE-2025-15238
Quanta Computer｜QOCA aim AI Medical Cloud Platform - SQL Inj - CVE-2025-15237
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Path Tr - CVE-2025-15235
Quanta Computer｜QOCA aim AI Medical Cloud Platform - Missing
Same weakness: CWE-36
- CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza - CVE-2026-44029
Nix 安全漏洞 - CVE-2026-7217
Deepractice PromptX Document File index.ts read_pdf absolute - CVE-2026-34515
AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in - CVE-2026-4373
JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File R
V. Comments for CVE-2025-15236
No comments yet