CVE-2025-15238

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Jan 5, 2026

CISA due date

—

The record

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

Affected packages

Ecosystem	Package	Introduced	Fixed