Home

Advisory: Cross-site Scripting Issue in the Clinical Viewer

Advisory: Cross-site Scripting Issue in the Clinical Viewer

Mar 01, 2022

March 1, 2022 – Advisory: Cross-site Scripting Issue in the Clinical Viewer

InterSystems has corrected a defect which could allow Cross-site scripting (XSS). A crafted payload within certain URI Parameters or HTTP POST Body can lead to arbitrary JavaScript execution in the Clinical Viewer in Health Share Information Exchange 2018.1 and Unified Care Record 2019.1.

The correction for this defect is identified as HSCV-8103/HSCV-8550. It is available via ad hoc change file or full kit distribution from the Worldwide Response Center (WRC). All affected customers are encouraged to request and apply the correction. The correction is included in version 2019.2 and all later product releases.

Latest Alerts & Advisories

Product Alerts & Advisories

InterSystems Security Public Notification

InterSystems has addressed security vulnerabilities that impact Web Gateways and CSP Gateways for InterSystems IRIS, InterSystems IRIS for Health, HealthShare, HealthShare HealthConnect, TrakCare, Caché, and Ensemble. Remediation steps and additional guidance documentation are available from the InterSystems Worldwide Response Center (WRC). Please reference “SVR2024A” when discussing this notice. For assistance with remediation contact your Application Provider or InterSystems Worldwide Response Center.

Product Alerts & Advisories

Alert: Database Corruption with Multi-Volume Databases after Truncation

InterSystems has corrected a defect that can cause database corruption or errors with multi-volume databases under extremely rare circumstances. Only databases that have been truncated are at risk.

Risk & Safety Alert HS2024-03: Multiple Alerts for InterSystems IRIS for Health, HealthShare Health Connect and HealthShare Solutions

There are four alerts in the HS2024-03 Alert Communication. A summary of each alert is shown below. Details for each alert are contained in the linked document.

Product Alerts & Advisories

Advisory: VMware vSAN Data Consistency Errors

Broadcom recently announced a problem that can cause data consistency errors in database applications. The Broadcom article is available here:

Product Alerts & Advisories

Advisory: License Enforcement Changes – REST and SOAP

Beginning with the release of InterSystems IRIS® data platform 2022.3, InterSystems corrected the license enforcement mechanism to include REST and SOAP requests. Due to this change, environments with non-core-based licenses that use REST or SOAP may experience greater license utilization after upgrading. To determine if this advisory applies to your InterSystems license, follow the instructions in the FAQ linked below.

Product Alerts & Advisories

Alert: SQL Query using “NOT %INLIST” fails to return results

InterSystems has corrected an issue that can cause a small number of SQL queries to return incorrect results. See below for the specifics on impacted queries.

Product Alerts & Advisories

Alert: Upgrades fail for HealthShare Health Connect instances not licensed for HL7® FHIR®

InterSystems has encountered a defect that causes some upgrades of HealthShare® Health Connect to fail. This only affects instances that are not licensed for the use of FHIR® and that have interoperability-enabled namespaces. Under these conditions, the upgrade fails with an error.

Product Alerts & Advisories

Advisory: AIX Memory Leak

In evaluating an IBM Support notification, InterSystems has determined a potential impact for our customers. The notification in question is:

Product Alerts & Advisories

Alert HS2024-limited: InterSystems IRIS for Health, Health Connect & HealthShare Solution Alert for Customers who Received an Ad Hoc Correction for HSIEO-8613

There is 1 alert in the HealthShare HS2024-limited Alert communication. An alert summary for the issue is shown is in the table below. Details for the alert are contained in the attached document: HS2024 Limited Communication.

Product Alerts & Advisories

Alert HS2024-02: Multiple InterSystems IRIS for Health, Health Connect & HealthShare Solution Alerts

There are 2 alerts in the HealthShare HS2024-02 Alert communication. An alert summary for each issue is shown is in the table below. Details for each alert are contained in the attached document: HS2024-02-Communication.

View All Alerts & Advisories

Sign Up Today

Receive notifications on support alerts, critical issues,
fixes, and product releases.

*Required Fields

Highlighted fields are required

First Name *

Last Name *

Email *

Company Name *

Country *

Please sign me up for the latest news and updates from InterSystems.**

*Required Fields

Highlighted fields are required

By submitting this form, you give consent to receive notifications concerning support alerts, critical issues, important updates, fixes, and product releases via email. In addition, you consent to your business contact information being entered into our CRM solution that is hosted in the United States, but maintained consistent with applicable data protection laws.
**By clicking here, you give consent to be contacted for news, updates and other marketing purposes related to existing and future InterSystems products, offerings, and events.