# Open ISES Tickets.

Every CVE that names Open ISES Tickets among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php](https://agentprime.io/advisories/CVE-2026-48249.md)
  `CVE-2026-48249` · CVE record: Open ISES Tickets · CVSS 8.2 High · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS
- [Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php](https://agentprime.io/advisories/CVE-2026-48248.md)
  `CVE-2026-48248` · CVE record: Open ISES Tickets · CVSS 8.2 High · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS
- [Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php](https://agentprime.io/advisories/CVE-2026-48247.md)
  `CVE-2026-48247` · CVE record: Open ISES Tickets · CVSS 8.2 High · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS
- [Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php](https://agentprime.io/advisories/CVE-2026-48246.md)
  `CVE-2026-48246` · CVE record: Open ISES Tickets · CVSS 8.2 High · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS
- [Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php](https://agentprime.io/advisories/CVE-2026-48245.md)
  `CVE-2026-48245` · CVE record: Open ISES Tickets · CVSS 6.9 Medium · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php](https://agentprime.io/advisories/CVE-2026-48244.md)
  `CVE-2026-48244` · CVE record: Open ISES Tickets · CVSS 6.9 Medium · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php](https://agentprime.io/advisories/CVE-2026-48243.md)
  `CVE-2026-48243` · CVE record: Open ISES Tickets · CVSS 6.9 Medium · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php](https://agentprime.io/advisories/CVE-2026-48242.md)
  `CVE-2026-48242` · CVE record: Open ISES Tickets · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php](https://agentprime.io/advisories/CVE-2026-48241.md)
  `CVE-2026-48241` · CVE record: Open ISES Tickets · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 May 2026 · Tags: Hard-coded credentials
- [Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters](https://agentprime.io/advisories/CVE-2026-48240.md)
  `CVE-2026-48240` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter](https://agentprime.io/advisories/CVE-2026-48239.md)
  `CVE-2026-48239` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter](https://agentprime.io/advisories/CVE-2026-48238.md)
  `CVE-2026-48238` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters](https://agentprime.io/advisories/CVE-2026-48237.md)
  `CVE-2026-48237` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters](https://agentprime.io/advisories/CVE-2026-48236.md)
  `CVE-2026-48236` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data](https://agentprime.io/advisories/CVE-2026-48235.md)
  `CVE-2026-48235` · CVE record: Open ISES Tickets · CVSS 8.8 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters](https://agentprime.io/advisories/CVE-2026-48234.md)
  `CVE-2026-48234` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter](https://agentprime.io/advisories/CVE-2026-48233.md)
  `CVE-2026-48233` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter](https://agentprime.io/advisories/CVE-2026-48232.md)
  `CVE-2026-48232` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters](https://agentprime.io/advisories/CVE-2026-48231.md)
  `CVE-2026-48231` · CVE record: Open ISES Tickets · CVSS 7.1 High · Not analysed yet · Published 21 May 2026 · Tags: SQL injection
- [Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters](https://agentprime.io/advisories/CVE-2026-48230.md)
  `CVE-2026-48230` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter](https://agentprime.io/advisories/CVE-2026-48229.md)
  `CVE-2026-48229` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters](https://agentprime.io/advisories/CVE-2026-48228.md)
  `CVE-2026-48228` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters](https://agentprime.io/advisories/CVE-2026-48227.md)
  `CVE-2026-48227` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters](https://agentprime.io/advisories/CVE-2026-48226.md)
  `CVE-2026-48226` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via landb.php \_type Parameter](https://agentprime.io/advisories/CVE-2026-48225.md)
  `CVE-2026-48225` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48224.md)
  `CVE-2026-48224` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48223.md)
  `CVE-2026-48223` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48222.md)
  `CVE-2026-48222` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48221.md)
  `CVE-2026-48221` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48220.md)
  `CVE-2026-48220` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter](https://agentprime.io/advisories/CVE-2026-48219.md)
  `CVE-2026-48219` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters](https://agentprime.io/advisories/CVE-2026-48218.md)
  `CVE-2026-48218` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST Parameters](https://agentprime.io/advisories/CVE-2026-48217.md)
  `CVE-2026-48217` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters](https://agentprime.io/advisories/CVE-2026-48216.md)
  `CVE-2026-48216` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter](https://agentprime.io/advisories/CVE-2026-48215.md)
  `CVE-2026-48215` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter](https://agentprime.io/advisories/CVE-2026-48214.md)
  `CVE-2026-48214` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter](https://agentprime.io/advisories/CVE-2026-48213.md)
  `CVE-2026-48213` · CVE record: Open ISES Tickets · CVSS 5.1 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=open-ises-tickets>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/open-ises-tickets/>. Everything for agents: <https://agentprime.io/llms.txt>.