CVE-2021-39369: Philips Myvue

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.

Affected products

• Philips Myvue: affected versions not specified
• Philips Speech: affected versions not specified
• Philips Vue Motion: up to and including 12.2.1.5
• Philips Vue Pacs: affected versions not specified

Published 2022-12-26. Last modified 2026-06-17.