Read the docs

Pure Storage

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Pure Storage records in CISA KEV

No Pure Storage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Purity//fa 11 records MEDIUM Purity 4 records LOW Purity//fb 4 records MEDIUM Portworx 1 record LOW Pure Swagger 1 record MEDIUM

Records

4 records in Purity · all components

TI-2023-14778 CVE-2023-31042 · GHSA-6h9m-rcph-4xpw

FlashBlade Object Store Protocol

Priority LOW 35

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00595 Published 2023-10-02 No fix listed
TI-2023-18445 CVE-2023-36627 · GHSA-v8xg-wm26-8m5w

FlashBlade Snapshot Scheduler

Priority LOW 34

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule fr…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0059 Published 2023-10-02 No fix listed
TI-2023-12918 CVE-2023-28372 · GHSA-p4hf-76x7-9vqg

FlashBlade Object Store Privileged Access

Priority LOW 32

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0055 Published 2023-10-02 No fix listed CWE-284
TI-2017-05011 CVE-2017-7352 · GHSA-fqxh-27g4-6qvx

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows…

Priority LOW 25

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add S…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2017-10-11 No fix listed CWE-79
Open these records in search →