Known Vulnerabilities for products from PureStorage
Listed below are 11 of the newest known vulnerabilities associated with the vendor "PureStorage".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-36628 json | A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access throu... | 8.8 - HIGH | 2023-10-03 | 2023-10-05 |
| CVE-2023-36627 json | A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured... | 2.7 - LOW | 2023-10-02 | 2023-10-05 |
| CVE-2023-32572 json | A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock o... | 4.9 - MEDIUM | 2023-10-03 | 2023-10-05 |
| CVE-2023-31042 json | A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impa... | 4.3 - MEDIUM | 2023-10-02 | 2023-10-05 |
| CVE-2023-28373 json | A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the avail... | 2.7 - LOW | 2023-10-03 | 2023-10-05 |
| CVE-2023-28372 json | A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period... | 2.7 - LOW | 2023-10-02 | 2023-10-05 |
| CVE-2022-32554 json | Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and p... | 9.8 - CRITICAL | 2022-06-23 | 2022-07-05 |
| CVE-2022-32553 json | Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and p... | 8.8 - HIGH | 2022-06-23 | 2022-07-05 |
| CVE-2022-32552 json | Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and p... | 8.8 - HIGH | 2022-06-23 | 2022-07-05 |
| CVE-2022-31524 json | The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_... | 9.3 - CRITICAL | 2022-07-11 | 2022-07-15 |
| CVE-2017-7352 json | Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbi... | 5.4 - MEDIUM | 2017-10-11 | 2019-12-11 |
Known software with vulnerabilities from PureStorage
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Purestorage | Purity | 4.7.5 |