Skip to content
Search to learn about InterSystems products and solutions, career opportunities, and more.

InterSystems Security Notification - Sept 18, 2018

September 18, 2018 – InterSystems Security Notification

InterSystems has discovered security vulnerabilities in Caché and therefore also in Ensemble, HealthShare and TrakCare. While those vulnerabilities were only recently discovered, they impact all versions of Caché and all versions of Ensemble and HealthShare. The vulnerabilities were corrected in InterSystems IRIS Data Platform before the product was released.

Remediation steps and additional guidance documentation are available from InterSystems Worldwide Response Center (WRC).  The remediation steps might require downtime and do affect customer applications.  Any InterSystems product distribution that you receive after June 11, 2018 contains the corrections for these vulnerabilities.

Please reference “January 2018 SV” when discussing this vulnerability.

For assistance with remediation contact your Application Provider or InterSystems  Worldwide Response Center.

Latest Alerts & Advisories

Aug 16, 2024
InterSystems has corrected a defect that can cause database corruption or errors with multi-volume databases under extremely rare circumstances. Only databases that have been truncated are at risk.
Jul 25, 2024
There are four alerts in the HS2024-03 Alert Communication. A summary of each alert is shown below. Details for each alert are contained in the linked document.
Jun 24, 2024
Broadcom recently announced a problem that can cause data consistency errors in database applications. The Broadcom article is available here:
May 31, 2024
Beginning with the release of InterSystems IRIS® data platform 2022.3, InterSystems corrected the license enforcement mechanism to include REST and SOAP requests. Due to this change, environments with non-core-based licenses that use REST or SOAP may experience greater license utilization after upgrading. To determine if this advisory applies to your InterSystems license, follow the instructions in the FAQ linked below.
May 01, 2024
InterSystems has corrected an issue that can cause a small number of SQL queries to return incorrect results. See below for the specifics on impacted queries.
Apr 09, 2024
InterSystems has encountered a defect that causes some upgrades of HealthShare® Health Connect to fail. This only affects instances that are not licensed for the use of FHIR® and that have interoperability-enabled namespaces. Under these conditions, the upgrade fails with an error.
Mar 20, 2024
In evaluating an IBM Support notification, InterSystems has determined a potential impact for our customers. The notification in question is:
Feb 27, 2024
There is 1 alert in the HealthShare HS2024-limited Alert communication. An alert summary for the issue is shown is in the table below. Details for the alert are contained in the attached document: HS2024 Limited Communication.
Feb 01, 2024
There are 2 alerts in the HealthShare HS2024-02 Alert communication. An alert summary for each issue is shown is in the table below. Details for each alert are contained in the attached document: HS2024-02-Communication.