Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Pure Storage Component: Purity//fb Clear all filters
TI-2024-00005 CVE-2024-0005 · GHSA-q6vw-x86f-x8m4

Command injection in Pure Storage FlashArray

Priority MEDIUM 42

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00631 Published 2024-09-23 No fix listed CWE-77
TI-2022-14183 CVE-2022-32552 · GHSA-9qqv-3c4f-3g8q

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0…

Priority MEDIUM 40

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01186 Published 2022-06-22 No fix listed
TI-2022-14184 CVE-2022-32553 · GHSA-gq4q-mq62-jxwm

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0…

Priority MEDIUM 40

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01186 Published 2022-06-22 No fix listed