March 1, 2022 – Multiple InterSystems IRIS for Health and HealthShare Advisories

This message links to 14 recent advisories that were posted on the InterSystems Product Alerts and Advisories page. All of the items affect HealthShare products, and the first three items affect InterSystems IRIS for Health as well.

1. FHIR Search with an Assigning Authority but no Identifier Omits Results

2. Some FHIR Queries that use _include and _revinclude Fail Silently

3. FHIR Queries May Omit Results

4. FHIR Queries that Specify a Quantity but no Units of Measure Return Incorrect Results

5. Time Zone Offsets not Applied to FHIR Resources

6. FHIR Searches that Specify a Time Range may Improperly Include or Exclude some Data

7. Clinical Viewer may lose “Standard Types” on Upgrade

8. Cross-site Scripting Issue in the Clinical Viewer

9. MPI Demographics May Contain Unconsented Data

10. When No Consent Group is Specified, Clinical Consent Rules May Fail

11. HS.Stream Global in Edge Gateways Not Cleared After Errors

12. HealthShare Care Community Tasks can be Assigned to Members of a Care Team who do not have Permission to View or Take Action on them

13. Cross-site Scripting Vulnerability in HealthShare Patient Index

14. Medications with a Blank “Start Date” may not Display in the Clinical Viewer