Vendor
Pure Storage
20 known vulnerabilities.
Pure Storage at a glance
- Last 12 months
- 3
- Critical · all time
- 7
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 2 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 1 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 3 | 0 |
| May 2025 | 1 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
20 results · Feed
-
High 8.5
Sensitive Information Logging Vulnerability in FlashBlade
A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.
-
Medium 6.9
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than …
-
High 8.4
PX Enterprise Improper Sanitization Vulnerability
A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.
-
Medium 5.1
FlashArray KEK Logging Vulnerability
A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.
-
High 8.3
FlashBlade DOS Vulnerability
Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service.
-
High 8.7
FlashArray DOS Vulnerability
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.
-
High 8.4
PX Backup Improper Sanitization Vulnerability
A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions.
-
Critical 9.8
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
-
Critical 9.1
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remote…
-
Critical 9.1
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely t…
-
Critical 9.1
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an…
-
Critical 10.0
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to t…
-
Critical 10.0
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active…
-
Critical 9.3
FlashBlade Authentication Mechanism Vulnerability
A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.
-
High 8.8
Privilege Escalation in VASA
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.
-
Medium 6.5
FlashArray pgroup Retention Lock SafeMode Protection
A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection.
-
Medium 4.4
FlashArray SafeMode Immutable Vulnerability
A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
-
High 7.7
FlashBlade Snapshot Scheduler
A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.
-
High 7.7
FlashBlade Object Store Protocol
A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.
-
Medium 6.5
FlashBlade Object Store Privileged Access
A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.