PatchTheCVEsplash portal vulnerabilities and fixes
Recent CVEs affecting splash portal, with upgrade or downgrade steps. 1 tracked.
Also searched as: splashportal.
splash portal has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-08-24. Highest priority: CVE-2015-4699 (score 46/100).
- CVE-2015-4699 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers
FAQ
How do I fix splash portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is splash portal being exploited right now?
None of the tracked splash portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which splash portal CVE should I patch first?
CVE-2015-4699 currently ranks highest (46/100): Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers.