Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Pure Storage Component: Purity Clear all filters
TI-2023-18445 CVE-2023-36627 · GHSA-v8xg-wm26-8m5w

FlashBlade Snapshot Scheduler

Priority LOW 34

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule fr…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0059 Published 2023-10-02 No fix listed
TI-2023-14778 CVE-2023-31042 · GHSA-6h9m-rcph-4xpw

FlashBlade Object Store Protocol

Priority LOW 35

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00595 Published 2023-10-02 No fix listed
TI-2023-12918 CVE-2023-28372 · GHSA-p4hf-76x7-9vqg

FlashBlade Object Store Privileged Access

Priority LOW 32

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0055 Published 2023-10-02 No fix listed CWE-284
TI-2017-05011 CVE-2017-7352 · GHSA-fqxh-27g4-6qvx

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows…

Priority LOW 25

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add S…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2017-10-11 No fix listed CWE-79