← Database

CVE-2021-39369

MEDIUM CVSS: 6.5 Published: 2022-12-26 Modified: 2026-06-17

Description

In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.

Affected Platforms

Philips Vue PacsPhilips Vue MotionPhilips SpeechPhilips Myvue

Weakness Type

CWE-22, CWE-22

References