Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

PureStorage Purity\/\/faCommand Injection

Risk 72
Severity
9.1
Command Injection
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Remedy

Affected customers will need to apply a self-service patch bundle or upgrade their Purity to an unaffected Purity version. This issue is resolved in the following FlashArray Purity releases: * Purity//FA versions 6.3.15 or later * Purity//FA versions 6.5.1 or later * Purity//FA versions 6.6.1 or later. This issue is resolved in the following FlashBlade Purity releases: * Purity//FB versions 4.1.12 or later * Purity//FB versions 4.3.2 or later
First published (updated )
CVE-2024-0005

PureStorage PurityFlashBlade Object Store Protocol

Risk 44
Severity
7.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

Remedy

This issue is resolved in FlashBlade Purity (OE) versions 3.3.7 or later, 4.0.5 or later, 4.1.2 or later.
First published (updated )
CVE-2023-31042

PureStorage PurityFlashBlade Snapshot Scheduler

Risk 44
Severity
7.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.

Remedy

This issue is resolved in FlashBlade Purity (OE) versions 3.3.8 or later, 4.0.6 or later, 4.1.3 or later.
First published (updated )
CVE-2023-36627

PureStorage PurityFlashBlade Object Store Privileged Access

Risk 49
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

Remedy

This issue is resolved starting in FlashBlade Purity (OE) version 4.1.1. or later.
First published (updated )
CVE-2023-28372

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203