{"id":"CVE-2015-3447","aliases":["EUVD-2015-3491","GHSA-xc6r-xw3r-wm8f"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall...","description":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02338,"percentile":0.83699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2015-04-29T20:00:00Z","modified":"2026-06-17T00:25:56Z","products":[{"vendor":"sonicwall","product":"sonicos"}],"references":[{"url":"http://seclists.org/fulldisclosure/2015/Apr/97","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/535393/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74406","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vulnerability-lab.com/get_content.php?id=1359","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1032204","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3447"},{"url":"https://github.com/advisories/GHSA-xc6r-xw3r-wm8f"}],"sources":{"cve":[{"id":"CVE-2015-3447","description":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.","status":"published","published":"2015-04-29T20:00:00Z","modified":"2024-08-06T05:47:57.656Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3491","description":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.","status":"published","published":"2015-04-29T20:00:00Z","modified":"2024-08-06T05:47:57Z","updated_at":"2026-11-03T02:22:07.516949Z"}],"ghsa":[{"id":"GHSA-xc6r-xw3r-wm8f","title":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall...","description":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.","status":"published","published":"2022-05-14T02:48:48Z","modified":"2023-02-02T05:06:38Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:52:20.153716Z"}],"nvd":[{"id":"CVE-2015-3447","description":"Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.","status":"published","published":"2015-04-29T20:59:04.623Z","modified":"2026-06-17T00:25:56.593Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:04.095849Z"}]}}