Openises

11 CVEs across 2 Openises products. Browse Openises vulnerabilities, severities, and proof-of-concept exploits.

Openises products with known CVEs

ProductCVEs
Tickets10
Open Ises Project1
Openises CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-25408High7.52026-05-30The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows unauthenticated attackers to download arbitra…
CVE-2026-35016Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary J…
CVE-2026-35015Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbit…
CVE-2026-35014Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrar…
CVE-2026-35013Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitr…
CVE-2026-35012Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitr…
CVE-2026-35011Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary Ja…
CVE-2026-35010Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitra…
CVE-2026-35009Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary…
CVE-2026-35008Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary J…
CVE-2026-35007Medium4.62026-05-20Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitr…