Medium severity6.5NVD Advisory· Published Dec 9, 2022· Updated Jun 17, 2026

CVE-2022-38765

Description

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

Affected products

Canon/Vitrea View
cpe:2.3:a:canon:vitrea_view:*:*:*:*:*:*:*:*
Range: <7.8
Canon Medical Informatics/Vitrea Visiondescription
Canon Medical Informatics/Vitrea Visionllm-create
Range: = 7.7.76.1

Patches

Vulnerability mechanics

References

www.vitalimages.com/customer-success-support-program/vital-images-software-security-updates/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000