Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Release: openises tickets 3.44.2 Clear all filters
TI-2026-27227 CVE-2026-35016 · GHSA-x262-4wj6-jf4j

Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_que…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27226 CVE-2026-35015 · GHSA-3g8r-5j29-m2x7

Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the t…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27225 CVE-2026-35014 · GHSA-8pv6-8844-jf93

Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the tick…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00229 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27224 CVE-2026-35013 · GHSA-rv9j-hj4r-57hm

Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thel…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27223 CVE-2026-35012 · GHSA-5xfh-m3mm-j8mj

Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ti…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27222 CVE-2026-35011 · GHSA-8whj-r8vv-vfhh

Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_call…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27221 CVE-2026-35010 · GHSA-p7vj-52m5-2hp4

Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the tic…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27220 CVE-2026-35009 · GHSA-qvvw-c5vm-j9c8

Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticke…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27219 CVE-2026-35008 · GHSA-9483-6rpx-9vj8

Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79
TI-2026-27218 CVE-2026-35007 · GHSA-m2f3-vcp9-x8xr

Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter

Priority LOW 23

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2026-05-20 Fixed in 3.44.2 CWE-79