Vendor

    Open Ises

    44 known vulnerabilities in products by Open Ises, 0 of them actively exploited (CISA KEV).

    Key figures

    44

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Open Ises
    CriticalCVE-2026-48241

    Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php

    		8.1
    HighCVE-2018-25403

    The Open ISES Project 3.30A SQL Injection via city_graph.php

    		8.2
    HighCVE-2018-25402

    The Open ISES Project 3.30A SQL Injection via inc_types_graph.php

    		8.2
    HighCVE-2018-25401

    The Open ISES Project 3.30A SQL Injection via sever_graph.php

    		8.2
    HighCVE-2018-25400

    The Open ISES Project 3.30A SQL Injection via form_post.php

    		8.2
    HighCVE-2018-25399

    The Open ISES Project 3.30A SQL Injection via nearby.php

    		8.2
    HighCVE-2018-25398

    The Open ISES Project 3.30A SQL Injection via main.php

    		8.2
    CriticalCVE-2026-48242

    Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php

    		8.1
    HighCVE-2018-25404

    The Open ISES Project 3.30A SQL Injection via add_facnote.php

    		8.2
    HighCVE-2026-48235

    Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data

    		8.2
    HighCVE-2026-48248

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php

    		5.9
    HighCVE-2026-48249

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php

    		5.9
    HighCVE-2026-48247

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php

    		5.9
    HighCVE-2026-48246

    Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php

    		5.9
    HighCVE-2026-48240

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters

    		7.1
    HighCVE-2026-48236

    Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters

    		7.1
    HighCVE-2026-48239

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter

    		7.1
    HighCVE-2026-48238

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter

    		7.1
    HighCVE-2026-48237

    Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters

    		7.1
    HighCVE-2026-48234

    Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters

    		7.1
    HighCVE-2026-48233

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter

    		7.1
    HighCVE-2026-48232

    Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter

    		7.1
    HighCVE-2026-48231

    Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters

    		7.1
    MediumCVE-2026-48245

    Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php

    		5.3
    MediumCVE-2026-48244

    Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php

    		5.3

    All vulnerabilities in search

    Products

    Products by Open Ises
    Tickets370
    Open Ises Project70