HIGHCVSS 8.8Vulnerability

CVE-2025-15240

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Properties

Severity
HIGH
Epss score
0.00519
Cvss severity
HIGH
Cvss score
8.8
Retrieved at
2026-10-21T01:24:47+00:00
Last source
FIRST EPSS
Score
8.8
Cve id
CVE-2025-15240
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-09-30T23:57:03+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published at
2026-01-05T09:15:54.250
Last modified
2026-10-07T11:10:00.153
Epss percentile
0.42998

Related Entities (2)

AFFECTS_PRODUCT (1)

→[Product]cpe:2.3:a:quantatw:qoca_aim:*:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Unrestricted Upload of File with Dangerous Type

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2025-15240 (CVSS 8.8) — Ninja Signal Threat Intelligence | Ninja Signal