CVE-2025-15237

Medium · 4.3

CVSS

4.3

EPSS

0.4%

Published

Jan 5, 2026

CISA due date

—

The record

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed