Skip to content
Search to learn about InterSystems products and solutions, career opportunities, and more.

Advisory: Cross-site Scripting Vulnerability in HealthShare Patient Index

March 1, 2022 – Advisory: Cross-site Scripting Vulnerability in HealthShare Patient Index

This issue affects HealthShare Patient Index versions 13, 14, 15.032, 2018.1, 2019.1, 2020.1 and 2020.2 and 2021.1.

A correction that addresses improper neutralization of special elements used in a command is available from the WRC as HSPI-2267.

RELATED TOPICS

Latest Alerts & Advisories

Oct 21, 2026
Advisory ID Products Affected Risk Category & Score Explicit Requirements DP-456155 All existing InterSystems interoperability products and solutions that use browser-based XSLT, including:
Oct 08, 2026
We’re excited to introduce the new InterSystems Software Distribution Platform, available beginning October 8 at downloads.intersystems.com.
Sep 11, 2026
This problem affects all versions of Unified Care Record and Information Exchange prior to 2026.2.
Jul 22, 2026
The 2026.2 release of InterSystems IRIS® data platform, InterSystems IRIS® for Health™, and HealthShare® Health Connect is now Generally Available (GA). This is a Continuous Delivery (CD) release.
Jul 22, 2026
This problem affects the following products:
Jul 22, 2026
This problem affects the following products: