CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-38765
Severity
MEDIUM
CVSS
6.5
EPSS
0.47%
Original NVD Description
Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.