{"schema_version":1,"title":"Open ISES Tickets vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 47 vulnerabilities in Open ISES Tickets: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-48249, was published on 21 May 2026.","url":"https://junglewise.ai/threats/technologies/tickets","json_url":"https://junglewise.ai/threats/technologies/tickets.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/tickets","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":12,"all_time":47,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":47},"latest":[{"cve":"CVE-2026-48249","cvss":5.9,"slug":"cve-2026-48249-open-ises-tickets-improper-tls-certificate-validation-in-mobile","title":"Open ISES Tickets improper TLS certificate validation in mobile login","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:22.167+00:00","url":"https://junglewise.ai/threats/cve-2026-48249-open-ises-tickets-improper-tls-certificate-validation-in-mobile"},{"cve":"CVE-2026-48248","cvss":5.9,"slug":"cve-2026-48248-open-ises-tickets-improper-tls-certificate-validation-in-login","title":"Open ISES Tickets improper TLS certificate validation in login component","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:22.037+00:00","url":"https://junglewise.ai/threats/cve-2026-48248-open-ises-tickets-improper-tls-certificate-validation-in-login"},{"cve":"CVE-2026-48247","cvss":5.9,"slug":"cve-2026-48247-open-ises-tickets-improper-tls-certificate-verification-in","title":"Open ISES Tickets improper TLS certificate verification in functions.inc.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:21.91+00:00","url":"https://junglewise.ai/threats/cve-2026-48247-open-ises-tickets-improper-tls-certificate-verification-in"},{"cve":"CVE-2026-48246","cvss":5.9,"slug":"cve-2026-48246-open-ises-tickets-improper-tls-certificate-validation-in-ajax","title":"Open ISES Tickets improper TLS certificate validation in ajax/reports.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:21.78+00:00","url":"https://junglewise.ai/threats/cve-2026-48246-open-ises-tickets-improper-tls-certificate-validation-in-ajax"},{"cve":"CVE-2026-48245","cvss":5.3,"slug":"cve-2026-48245-open-ises-tickets-hardcoded-google-maps-api-key-in-tables-php","title":"Open ISES Tickets hardcoded Google Maps API key in tables.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:21.653+00:00","url":"https://junglewise.ai/threats/cve-2026-48245-open-ises-tickets-hardcoded-google-maps-api-key-in-tables-php"},{"cve":"CVE-2026-48244","cvss":5.3,"slug":"cve-2026-48244-open-ises-tickets-hardcoded-google-maps-api-key-in-settings-inc","title":"Open ISES Tickets hardcoded Google Maps API key in settings.inc.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:21.53+00:00","url":"https://junglewise.ai/threats/cve-2026-48244-open-ises-tickets-hardcoded-google-maps-api-key-in-settings-inc"},{"cve":"CVE-2026-48243","cvss":5.3,"slug":"cve-2026-48243-open-ises-tickets-hardcoded-whitepages-api-key-in-wp1-php","title":"Open ISES Tickets hardcoded WhitePages API key in wp1.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:21.38+00:00","url":"https://junglewise.ai/threats/cve-2026-48243-open-ises-tickets-hardcoded-whitepages-api-key-in-wp1-php"},{"cve":"CVE-2026-48242","cvss":8.1,"slug":"cve-2026-48242-open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-php","title":"Open ISES Tickets hardcoded MySQL credentials in import_mdb.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:21.22+00:00","url":"https://junglewise.ai/threats/cve-2026-48242-open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-php"},{"cve":"CVE-2026-48241","cvss":8.1,"slug":"cve-2026-48241-open-ises-tickets-hardcoded-mysql-credentials-in-loader-php","title":"Open ISES Tickets hardcoded MySQL credentials in loader.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:21.07+00:00","url":"https://junglewise.ai/threats/cve-2026-48241-open-ises-tickets-hardcoded-mysql-credentials-in-loader-php"},{"cve":"CVE-2026-48240","cvss":7.1,"slug":"cve-2026-48240-open-ises-tickets-sql-injection-in-ajax-statistics-php","title":"Open ISES Tickets SQL injection in ajax/statistics.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.943+00:00","url":"https://junglewise.ai/threats/cve-2026-48240-open-ises-tickets-sql-injection-in-ajax-statistics-php"},{"cve":"CVE-2026-48239","cvss":7.1,"slug":"cve-2026-48239-open-ises-tickets-sql-injection-in-ajax-reports-php","title":"Open ISES Tickets SQL injection in ajax/reports.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.82+00:00","url":"https://junglewise.ai/threats/cve-2026-48239-open-ises-tickets-sql-injection-in-ajax-reports-php"},{"cve":"CVE-2026-48238","cvss":7.1,"slug":"cve-2026-48238-open-ises-tickets-sql-injection-in-ajax-mobile-main-php","title":"Open ISES Tickets SQL injection in ajax/mobile_main.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.697+00:00","url":"https://junglewise.ai/threats/cve-2026-48238-open-ises-tickets-sql-injection-in-ajax-mobile-main-php"},{"cve":"CVE-2026-48237","cvss":7.1,"slug":"cve-2026-48237-open-ises-tickets-sql-injection-in-message-php","title":"Open ISES Tickets SQL injection in message.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.57+00:00","url":"https://junglewise.ai/threats/cve-2026-48237-open-ises-tickets-sql-injection-in-message-php"},{"cve":"CVE-2026-48236","cvss":7.1,"slug":"cve-2026-48236-open-ises-tickets-sql-injection-in-db-loader-php","title":"Open ISES Tickets SQL injection in db_loader.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.44+00:00","url":"https://junglewise.ai/threats/cve-2026-48236-open-ises-tickets-sql-injection-in-db-loader-php"},{"cve":"CVE-2026-48235","cvss":8.2,"slug":"cve-2026-48235-open-ises-tickets-sql-injection-in-incs-remotes-inc-php","title":"Open ISES Tickets SQL injection in incs/remotes.inc.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.31+00:00","url":"https://junglewise.ai/threats/cve-2026-48235-open-ises-tickets-sql-injection-in-incs-remotes-inc-php"},{"cve":"CVE-2026-48234","cvss":7.1,"slug":"cve-2026-48234-open-ises-tickets-sql-injection-in-portal-ajax-list-requests-php","title":"Open ISES Tickets SQL injection in portal/ajax/list_requests.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.18+00:00","url":"https://junglewise.ai/threats/cve-2026-48234-open-ises-tickets-sql-injection-in-portal-ajax-list-requests-php"},{"cve":"CVE-2026-48233","cvss":7.1,"slug":"cve-2026-48233-open-ises-tickets-sql-injection-in-ajax-sit-incidents-php","title":"Open ISES Tickets SQL injection in ajax/sit_incidents.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.05+00:00","url":"https://junglewise.ai/threats/cve-2026-48233-open-ises-tickets-sql-injection-in-ajax-sit-incidents-php"},{"cve":"CVE-2026-48232","cvss":7.1,"slug":"cve-2026-48232-open-ises-tickets-sql-injection-in-ajax-fullsit-incidents-php","title":"Open ISES Tickets SQL injection in ajax/fullsit_incidents.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:19.927+00:00","url":"https://junglewise.ai/threats/cve-2026-48232-open-ises-tickets-sql-injection-in-ajax-fullsit-incidents-php"},{"cve":"CVE-2026-48231","cvss":7.1,"slug":"cve-2026-48231-open-ises-tickets-sql-injection-in-tables-php","title":"Open ISES Tickets SQL injection in tables.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-48231-open-ises-tickets-sql-injection-in-tables-php"},{"cve":"CVE-2026-48230","cvss":5.4,"slug":"cve-2026-48230-open-ises-tickets-reflected-xss-in-ticketsmdb-import-php","title":"Open ISES Tickets reflected XSS in ticketsmdb_import.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19.64+00:00","url":"https://junglewise.ai/threats/cve-2026-48230-open-ises-tickets-reflected-xss-in-ticketsmdb-import-php"},{"cve":"CVE-2026-48229","cvss":5.4,"slug":"cve-2026-48229-open-ises-tickets-reflected-xss-in-routes-i-php","title":"Open ISES Tickets reflected XSS in routes_i.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19.507+00:00","url":"https://junglewise.ai/threats/cve-2026-48229-open-ises-tickets-reflected-xss-in-routes-i-php"},{"cve":"CVE-2026-48228","cvss":5.4,"slug":"cve-2026-48228-open-ises-tickets-reflected-xss-in-patient-w-php","title":"Open ISES Tickets reflected XSS in patient_w.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19.38+00:00","url":"https://junglewise.ai/threats/cve-2026-48228-open-ises-tickets-reflected-xss-in-patient-w-php"},{"cve":"CVE-2026-48227","cvss":5.4,"slug":"cve-2026-48227-open-ises-tickets-reflected-xss-in-patient-php","title":"Open ISES Tickets reflected XSS in patient.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19.257+00:00","url":"https://junglewise.ai/threats/cve-2026-48227-open-ises-tickets-reflected-xss-in-patient-php"},{"cve":"CVE-2026-48226","cvss":5.4,"slug":"cve-2026-48226-open-ises-tickets-reflected-xss-in-os-watch-php","title":"Open ISES Tickets Reflected XSS in os_watch.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19.127+00:00","url":"https://junglewise.ai/threats/cve-2026-48226-open-ises-tickets-reflected-xss-in-os-watch-php"},{"cve":"CVE-2026-48225","cvss":5.4,"slug":"cve-2026-48225-open-ises-tickets-reflected-xss-in-landb-php","title":"Open ISES Tickets reflected XSS in landb.php","severity":"medium","exploited":false,"published_at":"2026-05-21T18:16:19+00:00","url":"https://junglewise.ai/threats/cve-2026-48225-open-ises-tickets-reflected-xss-in-landb-php"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Open ISES Tickets","slug":"tickets","vendor":{"name":"Open ISES","slug":"open-ises","url":"https://junglewise.ai/threats/vendors/open-ises"},"aliases":[],"category":"web-application","homepage":"https://openises.sourceforge.io/tickets.php","repo_url":"https://sourceforge.net/projects/openises/","description":"Tickets is an open-source web-based help desk and issue tracking system.","url":"https://junglewise.ai/threats/technologies/tickets"},"most_severe":[{"cve":"CVE-2026-48235","cvss":8.2,"slug":"cve-2026-48235-open-ises-tickets-sql-injection-in-incs-remotes-inc-php","title":"Open ISES Tickets SQL injection in incs/remotes.inc.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.31+00:00","url":"https://junglewise.ai/threats/cve-2026-48235-open-ises-tickets-sql-injection-in-incs-remotes-inc-php"},{"cve":"CVE-2026-48242","cvss":8.1,"slug":"cve-2026-48242-open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-php","title":"Open ISES Tickets hardcoded MySQL credentials in import_mdb.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:21.22+00:00","url":"https://junglewise.ai/threats/cve-2026-48242-open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-php"},{"cve":"CVE-2026-48241","cvss":8.1,"slug":"cve-2026-48241-open-ises-tickets-hardcoded-mysql-credentials-in-loader-php","title":"Open ISES Tickets hardcoded MySQL credentials in loader.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:21.07+00:00","url":"https://junglewise.ai/threats/cve-2026-48241-open-ises-tickets-hardcoded-mysql-credentials-in-loader-php"},{"cve":"CVE-2026-48240","cvss":7.1,"slug":"cve-2026-48240-open-ises-tickets-sql-injection-in-ajax-statistics-php","title":"Open ISES Tickets SQL injection in ajax/statistics.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.943+00:00","url":"https://junglewise.ai/threats/cve-2026-48240-open-ises-tickets-sql-injection-in-ajax-statistics-php"},{"cve":"CVE-2026-48239","cvss":7.1,"slug":"cve-2026-48239-open-ises-tickets-sql-injection-in-ajax-reports-php","title":"Open ISES Tickets SQL injection in ajax/reports.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.82+00:00","url":"https://junglewise.ai/threats/cve-2026-48239-open-ises-tickets-sql-injection-in-ajax-reports-php"},{"cve":"CVE-2026-48238","cvss":7.1,"slug":"cve-2026-48238-open-ises-tickets-sql-injection-in-ajax-mobile-main-php","title":"Open ISES Tickets SQL injection in ajax/mobile_main.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.697+00:00","url":"https://junglewise.ai/threats/cve-2026-48238-open-ises-tickets-sql-injection-in-ajax-mobile-main-php"},{"cve":"CVE-2026-48237","cvss":7.1,"slug":"cve-2026-48237-open-ises-tickets-sql-injection-in-message-php","title":"Open ISES Tickets SQL injection in message.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.57+00:00","url":"https://junglewise.ai/threats/cve-2026-48237-open-ises-tickets-sql-injection-in-message-php"},{"cve":"CVE-2026-48236","cvss":7.1,"slug":"cve-2026-48236-open-ises-tickets-sql-injection-in-db-loader-php","title":"Open ISES Tickets SQL injection in db_loader.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.44+00:00","url":"https://junglewise.ai/threats/cve-2026-48236-open-ises-tickets-sql-injection-in-db-loader-php"},{"cve":"CVE-2026-48234","cvss":7.1,"slug":"cve-2026-48234-open-ises-tickets-sql-injection-in-portal-ajax-list-requests-php","title":"Open ISES Tickets SQL injection in portal/ajax/list_requests.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.18+00:00","url":"https://junglewise.ai/threats/cve-2026-48234-open-ises-tickets-sql-injection-in-portal-ajax-list-requests-php"},{"cve":"CVE-2026-48233","cvss":7.1,"slug":"cve-2026-48233-open-ises-tickets-sql-injection-in-ajax-sit-incidents-php","title":"Open ISES Tickets SQL injection in ajax/sit_incidents.php","severity":"high","exploited":false,"published_at":"2026-05-21T18:16:20.05+00:00","url":"https://junglewise.ai/threats/cve-2026-48233-open-ises-tickets-sql-injection-in-ajax-sit-incidents-php"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}