CVE-2022-38765

—

CVSS 3.1

6.5 medium

EPSS

<1%p40

Published

Dec 9, 2022 (Dec 9, 2022)

Modified

Jun 17, 2026

Description

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

Vendors: canon
Products: vitrea view
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.