Pure Storage

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Pure Storage records in CISA KEV

No Pure Storage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Purity//fa 11 records MEDIUM Purity 4 records LOW Purity//fb 4 records MEDIUM Portworx 1 record LOW Pure Swagger 1 record MEDIUM

Records

1 record in Pure Swagger · all components

TI-2022-13449 CVE-2022-31524 · GHSA-9953-8mhm-vpr8

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute…

MEDIUM 43

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01337 Published 2022-07-11 No fix listed CWE-22

Open these records in search →

Critical	9
High	10
Medium	6
Low	0
No CVSS	0