Read the docs

Pure Storage

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Pure Storage records in CISA KEV

No Pure Storage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Purity//fa 11 records MEDIUM Purity 4 records LOW Purity//fb 4 records MEDIUM Portworx 1 record LOW Pure Swagger 1 record MEDIUM

Records

4 records in Purity//fb · all components

TI-2024-00005 CVE-2024-0005 · GHSA-q6vw-x86f-x8m4

Command injection in Pure Storage FlashArray

Priority MEDIUM 42

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00631 Published 2024-09-23 No fix listed CWE-77
TI-2022-14184 CVE-2022-32553 · GHSA-gq4q-mq62-jxwm

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0…

Priority MEDIUM 40

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01186 Published 2022-06-22 No fix listed
TI-2022-14183 CVE-2022-32552 · GHSA-9qqv-3c4f-3g8q

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0…

Priority MEDIUM 40

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01186 Published 2022-06-22 No fix listed
Open these records in search →