CVE-2015-3447

Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.

• CWE-79

• http://seclists.org/fulldisclosure/2015/Apr/97Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/535393/100/0/threaded
• http://www.securityfocus.com/bid/74406Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032204Third Party Advisory, VDB Entry
• http://www.vulnerability-lab.com/get_content.php?id=1359Exploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2015/Apr/97Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/535393/100/0/threaded
• http://www.securityfocus.com/bid/74406Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032204Third Party Advisory, VDB Entry
• http://www.vulnerability-lab.com/get_content.php?id=1359Exploit, Third Party Advisory

Published

Apr 29, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3439Cross-site scripting (XSS) vulnerability in the Ephox (forme…
• CVE-2015-3440Cross-site scripting (XSS) vulnerability in wp-includes/wp-d…
• CVE-2015-3441The Parental Control panel in Genexis devices with DRGOS bef…
• CVE-2015-3442Soreco Xpert.Line 3.0 allows local users to spoof users and …
• CVE-2015-3443Cross-site scripting (XSS) vulnerability in the basic dashbo…
• CVE-2015-3446The Framework Daemon in AlienVault Unified Security Manageme…
• CVE-2015-3448REST client for Ruby (aka rest-client) before 1.7.3 logs use…
• CVE-2015-3449The Windows client in SAP Afaria 7.0.6398.0 uses weak permis…
• CVE-2015-3450Heap-based buffer overflow in libaxl 0.6.9 allows attackers …
• CVE-2015-3451The _clone function in XML::LibXML before 2.0119 does not pr…
• CVE-2015-3454TelescopeJS before 0.15 leaks user bcrypt password hashes in…
• CVE-2015-3455Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before…