============================================================================= Run Date: SEP 24, 2026 Designation: PREC*7*5 Package : PREC - PHARMACY ENTERPRISE CUSTOM S Priority: Mandatory Version : 7 SEQ #5 Status: Released Compliance Date: OCT 24, 2026 ============================================================================= Subject: Defects fix and Technical Reference Model Upgrade Category: - Informational - Other Description: ============ The Pharmacy Enterprise Customization System (PECS) application, through a web-based Graphical User Interface (GUI), allows Veterans Health administration (VHA) pharmacists and clinicians to research and request custom changes to Drug-Drug Interaction, Drug Pairs, Dose Range, Duplicate Therapy, and Professional Monograph records, controlling access through a role based authorization. VHA Pharmacy Benefits Management (PBM) periodically (as needed in support of Department of Veterans Affairs (VA) procedures and priorities) prepare, review, and approve the customizations, which result in VA Custom drug data, which will supersede or enhance the industry standard First Databank (FDB) drug data. This informational patch addresses several defects and brings the application into compliance with the Technical Reference Model (TRM). The main objectives are to remediate security vulnerabilities in outdated versions of log4j and ESAPI and to resolve various functional issues. No user-visible functionality changes are introduced beyond the fixes described in the Defect Tracking System Ticket(s) section below. EHRM Impact Statement: ---------------------- This patch should have no EHRM impact, and can be installed at all sites, including EHRM converted sites. Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- Not Applicable (N/A) Forms Associated: Form Name File Number New/Modified/Deleted --------- ----------- -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: N/A Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ----------------- -------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted ------------------- ---------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A Additional Information: New Service Requests (NSRs): ---------------------------- N/A Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: ============================================ 1. PECS-717 - Contact Us page asterisk (*) issue. Problem 1: ---------- On the "Contact Us" page when selecting "Edit Content" and an asterisk (*) is present in the content the page allows for saving the data, but causes an error while loading content after user logs off and logs back into PECS application. Resolution 1: ------------- Added validation logic to correctly handle asterisks in editable content. 2. PECS-662 - FDB Comparison Reports headers not read properly by screen reader. Problem 2: ---------- 508 Defect - On the Reports page, text "FDB Comparison Reports" is read as heading level 2 and the following heading level of text, "duplicate therapy", is heading level 4. Resolution 2: ------------- Corrected heading levels and updated ARIA tags so screen readers announce the structure properly. 3. PECS-664 - Dose Range Error Messages are structured as a list but not announced as a list via screen reader. Problem 3: ---------- 508 Defect - The Dose Range error messages when using Easy Search tab and selecting "Dose Range" are structured as a list but are not announced as a list via screen reader. The structure of the list in the error messages cannot be understood by assistive technology. Resolution 3: ------------- Updated Dose Range error messages to use proper list markup and ARIA roles so screen readers read them as a list. 4. PECS-714 (INC41545010) - System error in PECS when conducting simple DDI search for certain drugs Problem 4: ---------- Receiving a system error in PECS when conducting a simple DDI search for particular drugs. The vendor FDB has not updated their data and a missing ID is present on their side, therefore the error occurs. Resolution 4: ------------- Resolved the DDI search system error by improving validation and correcting the query logic for affected drugs. 5. PECS-758 - Update current ESAPI and Log4j versions to the latest TRM compliant versions Problem 5: ---------- ESAPI needs to be upgraded to v2.7.0 Log4j needs to be upgraded to v2.25.3 Resolution 5: ------------- Upgraded Log4j to 2.25.3 and updated ESAPI to the TRM-approved version. 6. PECS-665 - Interactive fields in the Dose Range page on the Easy Search tab are not conveyed to users as required fields. Problem 6: ---------- 508 Defect - When using Easy Search tab and selecting "Dose Range" the interactive fields are not conveyed as "Required" fields via screen reader. Resolution 6: ------------- Added required-field indicators and ARIA attributes so screen readers properly announce required interactive fields. 7. PECS-718 - Fix Entra ID logout for PECS Problem 7: ---------- Issue with users not being able to logout of PECS. URL needs to be updated in the application to allow for the correct logout flow. Resolution 7: ------------- Corrected the logout flow to fully clear sessions. Test Sites: ----------- User Acceptance Testing (UAT) completed by the Business Office, Pharmacy Benefits Management (PBM). SNOW Change Order #: --------------------- TBD Software and Documentation Retrieval Instructions: ------------------------------------------------------------------- This is a Web Application, JAVA Build with a Centralized Server promotion. Other Software Files: N/A Documentation describing the new functionality is included in this release. Documentation can be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/. Documentation can also be obtained at https://download.vista.domain.ext/index.html/SOFTWARE. Documentation Title File Name -------------------------------------------------------------------------- PECS 7.0.5 Deployment, Installation, PREC_7_0_5_DIBR.DOCX Back-Out & Rollback Guide (DIBR) PREC_7_0_5_DIBR.PDF Patch Installation: ------------------- No installation is required at Local sites. ****** This is an informational patch ONLY. ****** Pre/Post Installation Overview: N/A Pre-Installation Instructions: N/A Installation Instructions: PECS is a Centralized Web application and JAVA component for this patch is being installed by AITC. The Deployment, Installation, Back-Out and Rollback Guide (DIBR) for this patch contains detailed installation instructions on how to deploy this PECS Java application patch at the Central Application Server. Post-Installation Instructions: N/A Back-Out/Roll Back Plan: ------------------------ Refer to the PECS 7.0.5 Deployment, Installation, Back-Out & Rollback Guide (DIBR). Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : APR 02, 2026 Completed By: Date Completed: SEP 24, 2026 Released By : Date Released : SEP 24, 2026 ============================================================================= Packman Mail Message: ===================== No routines included