Splashin

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Splashin records in CISA KEV

No Splashin vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2025-28741 CVE-2025-45157 · GHSA-pr48-hfmc-f9vq

LOW 28

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00269 Published 2025-07-18 No fix listed CWE-284

TI-2025-28740 CVE-2025-45156 · GHSA-3m4m-v7p2-vg4g

LOW 24

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00401 Published 2025-07-18 No fix listed