Skip to content
Purestorage vulnerabilities
Newest
-
everpure flasharray
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged...
CVE-2026-6444
8.6 High
-
everpure flasharray
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could...
CVE-2026-6445
8.7 High
-
purestorage flashblade
Sensitive Information Logging Vulnerability in FlashBlade
CVE-2026-0207
8.5 High
-
purestorage flasharray
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies...
CVE-2026-0209
6.9 Medium
-
pure storage px enterprise, purestorage portworx +1 more
PX Enterprise Improper Sanitization Vulnerability
CVE-2025-9127
8.4 High
-
pure storage flasharray
FlashArray KEK Logging Vulnerability
CVE-2025-2327
5.1 Medium
-
pure storage flashblade
FlashBlade DOS Vulnerability
CVE-2025-0052
8.3 High
-
pure storage flasharray
FlashArray DOS Vulnerability
CVE-2025-0051
8.7 High
-
purestorage flasharray
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege...
CVE-2024-3057
9.8 Critical
-
purestorage flasharray, flashblade, purity\/\/fa +1 more +3 more
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute...
CVE-2024-0005
9.1 Critical
-
purestorage flasharray, purity\/\/fa +1 more
A condition exists in FlashArray Purity whereby an user with array admin role can execute...
CVE-2024-0004
9.1 Critical
-
purestorage flasharray, purity\/\/fa +1 more
A condition exists in FlashArray Purity whereby a malicious user could use a remote...
CVE-2024-0003
9.1 Critical
-
purestorage flasharray, purity\/\/fa +1 more
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account...
CVE-2024-0002
10.0 Critical
-
pure storage flasharray, purestorage purity\/\/fa +1 more
A condition exists in FlashArray Purity whereby a local account intended for initial array...
CVE-2024-0001
10.0 Critical
-
purestorage flashblade
FlashBlade Authentication Mechanism Vulnerability
CVE-2023-4976
9.3 Critical
-
pure storage flasharray purity, purestorage purity\/\/fa +1 more
Privilege Escalation in VASA
CVE-2023-36628
8.8 High
-
pure storage flasharray purity, purestorage purity\/\/fa +1 more
FlashArray pgroup Retention Lock SafeMode Protection
CVE-2023-32572
6.5 Medium
-
pure storage flasharray purity, purestorage purity\/\/fa +1 more
FlashArray SafeMode Immutable Vulnerability
CVE-2023-28373
4.4 Medium
-
pure storage flashblade purity, purestorage purity +1 more
FlashBlade Snapshot Scheduler
CVE-2023-36627
7.7 High
-
pure storage flashblade purity, purestorage purity +1 more
FlashBlade Object Store Protocol
CVE-2023-31042
7.7 High
-
pure storage flashblade, purestorage purity +1 more
FlashBlade Object Store Privileged Access
CVE-2023-28372
6.5 Medium
-
purestorage pure swagger
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path...
CVE-2022-31524
9.3 Critical
-
purestorage purity\/\/fa, purity\/\/fb +1 more
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...
CVE-2022-32554
9.8 Critical
-
purestorage purity\/\/fa, purity\/\/fb +1 more
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...
CVE-2022-32552
8.8 High
-
purestorage purity\/\/fa, purity\/\/fb +1 more
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...
CVE-2022-32553
8.8 High
-
purestorage purity
Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote...
CVE-2017-7352
5.4 Medium