CVE-2022-38765: Canon Vitrea View

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

Affected products

• Canon Vitrea View: before 7.8 (fixed in 7.8)

Published 2022-12-09. Last modified 2026-06-17.