Vendor
Splashid
Products
1
CVEs
3
Across products
3
Status
Private
Products
1- 3 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-45157 | Med | 0.42 | 6.5 | 0.00 | Jul 18, 2025 | Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users. | ||
| CVE-2025-45156 | Med | 0.34 | 5.3 | 0.00 | Jul 18, 2025 | Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users. | ||
| CVE-2014-5874 | 0.00 | — | 0.00 | Sep 11, 2014 | The SplashID (aka com.splashidandroid) application 7.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
- risk 0.42cvss 6.5epss 0.00
Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.
- risk 0.34cvss 5.3epss 0.00
Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.
- CVE-2014-5874Sep 11, 2014risk 0.00cvss —epss 0.00
The SplashID (aka com.splashidandroid) application 7.2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.