Approved changes feed: RSS · Atom
cpe:2.3:a:open_ises:tickets:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Open Ises (6aad7d21-fa47-5752-88e6-4a82819d8f5b) |
|---|---|
| Product | Tickets (94a03d5f-8f45-5b5c-93ab-966b1931058c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48249 |
vulnerable | 2026-06-08 08:05:12.279686 |
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
MEDIUM (5.9)
Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests issued during the mobile (RouteMate) login flow. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.
Published: 2026-05-21T17:11:20.219Z
Updated: 2026-07-28T01:49:24.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48248 |
vulnerable | 2026-06-08 08:05:12.279299 |
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
MEDIUM (5.9)
Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests issued during the login/authentication flow. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.
Published: 2026-05-21T17:11:17.519Z
Updated: 2026-07-28T01:49:23.781Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48247 |
vulnerable | 2026-06-08 08:05:12.278983 |
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
MEDIUM (5.9)
Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/functions.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for general-purpose outbound HTTPS requests issued by the shared helper functions. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.
Published: 2026-05-21T17:11:15.088Z
Updated: 2026-07-28T01:49:23.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48246 |
vulnerable | 2026-06-08 08:05:12.278745 |
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
MEDIUM (5.9)
Open ISES Tickets before 3.44.2 disables TLS certificate verification in ajax/reports.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound HTTPS requests for Google Maps Directions API lookups during incident report generation. An attacker positioned on the network path between the server and the remote endpoint can present a forged certificate to intercept, monitor, or modify the request and response, including any API keys or session-bearing data in transit.
Published: 2026-05-21T17:11:12.304Z
Updated: 2026-07-28T01:49:22.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48245 |
vulnerable | 2026-06-08 08:05:12.278507 |
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
MEDIUM (5.3)
Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud project.
Published: 2026-05-21T17:11:07.824Z
Updated: 2026-07-28T01:49:21.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48244 |
vulnerable | 2026-06-08 08:05:12.278272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48243 |
vulnerable | 2026-06-08 08:05:12.278028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48242 |
vulnerable | 2026-06-08 08:05:12.277793 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48241 |
vulnerable | 2026-06-08 08:05:12.277623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48240 |
vulnerable | 2026-06-08 08:05:12.277370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48239 |
vulnerable | 2026-06-08 08:05:12.277016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48238 |
vulnerable | 2026-06-08 08:05:12.276776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48237 |
vulnerable | 2026-06-08 08:05:12.276442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48236 |
vulnerable | 2026-06-08 08:05:12.276098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48235 |
vulnerable | 2026-06-08 08:05:12.275928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48234 |
vulnerable | 2026-06-08 08:05:12.275684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48233 |
vulnerable | 2026-06-08 08:05:12.275440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48232 |
vulnerable | 2026-06-08 08:05:12.275089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48231 |
vulnerable | 2026-06-08 08:05:12.274845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48230 |
vulnerable | 2026-06-08 08:05:12.274507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48229 |
vulnerable | 2026-06-08 08:05:12.274333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48228 |
vulnerable | 2026-06-08 08:05:12.273975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48227 |
vulnerable | 2026-06-08 08:05:12.273730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48226 |
vulnerable | 2026-06-08 08:05:12.273381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48225 |
vulnerable | 2026-06-08 08:05:12.273136 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48224 |
vulnerable | 2026-06-08 08:05:12.272889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48223 |
vulnerable | 2026-06-08 08:05:12.272579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48222 |
vulnerable | 2026-06-08 08:05:12.272335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48221 |
vulnerable | 2026-06-08 08:05:12.272101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48220 |
vulnerable | 2026-06-08 08:05:12.271860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48219 |
vulnerable | 2026-06-08 08:05:12.271620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48218 |
vulnerable | 2026-06-08 08:05:12.271373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48217 |
vulnerable | 2026-06-08 08:05:12.271197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48216 |
vulnerable | 2026-06-08 08:05:12.270938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48215 |
vulnerable | 2026-06-08 08:05:12.270665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48214 |
vulnerable | 2026-06-08 08:05:12.270368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48213 |
vulnerable | 2026-06-08 08:05:12.269872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.