PureStorage kayıtları

purestorage üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

19 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2022-32554İstismar yok	Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FApurestorage · purity\/\/fa pre-auth RCE	Kritik9,8	—	%1,3	23 Haz 2022
39İzleyin	CVE-2024-0001İstismar yok	A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowingpurestorage · purity\/\/fa · CWE-1188 Kimlik doğrulamasız	Kritik9,8	—	%0,9	23 Eyl 2024
39İzleyin	CVE-2024-0002İstismar yok	A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.purestorage · purity\/\/fa · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	23 Eyl 2024
39İzleyin	CVE-2024-3057İstismar yok	A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.purestorage · flasharray · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%0,4	8 Eki 2024
37İzleyin	CVE-2022-31524İstismar yok	The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function ipurestorage · pure swagger · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,3	—	%1,3	10 Tem 2022
37İzleyin	CVE-2023-4976İstismar yok	FlashBlade Authentication Mechanism Vulnerabilitypurestorage · flashblade · CWE-269 Kimlik doğrulamasız	Kritik9,3	—	%0,4	17 Tem 2024
35İzleyin	CVE-2022-32553İstismar yok	Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FApurestorage · purity\/\/fa	Yüksek8,8	—	%1,2	23 Haz 2022
35İzleyin	CVE-2022-32552İstismar yok	Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FApurestorage · purity\/\/fa	Yüksek8,8	—	%1,2	23 Haz 2022
35İzleyin	CVE-2024-0005İstismar yok	A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specificpurestorage · purity\/\/fa · CWE-77 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,6	23 Eyl 2024
35İzleyin	CVE-2023-36628İstismar yok	Privilege Escalation in VASApurestorage · purity\/\/fa · CWE-269	Yüksek8,8	—	%0,5	2 Eki 2023
33İzleyin	CVE-2025-9127İstismar yok	PX Enterprise Improper Sanitization Vulnerabilitypurestorage · portworx · CWE-116	Yüksek8,4	—	%0,1	4 Ara 2025
28İzleyin	CVE-2024-0004İstismar yok	A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege purestorage · purity\/\/fa · CWE-94 RCE	Yüksek7,2	—	%0,6	23 Eyl 2024
28İzleyin	CVE-2024-0003İstismar yok	A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the arraypurestorage · purity\/\/fa · CWE-269	Yüksek7,2	—	%0,5	23 Eyl 2024
21İzleyin	CVE-2017-7352İstismar yok	Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web scrippurestorage · purity · CWE-79 XSS	Orta5,4	—	%0,6	11 Eki 2017
19İzleyin	CVE-2023-32572İstismar yok	FlashArray pgroup Retention Lock SafeMode Protectionpurestorage · purity\/\/fa · CWE-284 Erişim denetimi (IDOR)	Orta4,9	—	%0,4	2 Eki 2023
17İzleyin	CVE-2023-31042İstismar yok	FlashBlade Object Store Protocolpurestorage · purity Hizmet dışı bırakma	Orta4,3	—	%0,5	2 Eki 2023
10İzleyin	CVE-2023-36627İstismar yok	FlashBlade Snapshot Schedulerpurestorage · purity Hizmet dışı bırakma	Düşük2,7	—	%0,5	2 Eki 2023
10İzleyin	CVE-2023-28372İstismar yok	FlashBlade Object Store Privileged Accesspurestorage · purity · CWE-284 Erişim denetimi (IDOR) Hizmet dışı bırakma	Düşük2,7	—	%0,5	2 Eki 2023
10İzleyin	CVE-2023-28373İstismar yok	FlashArray SafeMode Immutable Vulnerabilitypurestorage · purity\/\/fa Hizmet dışı bırakma	Düşük2,7	—	%0,4	2 Eki 2023

CVE-2022-32554
39İzleyin
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
purestorage · purity\/\/fa23 Haz 2022
CVE-2024-0001
39İzleyin
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
purestorage · purity\/\/fa23 Eyl 2024
CVE-2024-0002
39İzleyin
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
purestorage · purity\/\/fa23 Eyl 2024
CVE-2024-3057
39İzleyin
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
purestorage · flasharray8 Eki 2024
CVE-2022-31524
37İzleyin
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function i
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
purestorage · pure swagger10 Tem 2022
CVE-2023-4976
37İzleyin
FlashBlade Authentication Mechanism Vulnerability
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
purestorage · flashblade17 Tem 2024
CVE-2022-32553
35İzleyin
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA
YüksekCVSS 8,8İstismar yokEPSS %1
purestorage · purity\/\/fa23 Haz 2022
CVE-2022-32552
35İzleyin
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA
YüksekCVSS 8,8İstismar yokEPSS %1
purestorage · purity\/\/fa23 Haz 2022
CVE-2024-0005
35İzleyin
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specific
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
purestorage · purity\/\/fa23 Eyl 2024
CVE-2023-36628
35İzleyin
Privilege Escalation in VASA
YüksekCVSS 8,8İstismar yokEPSS %0
purestorage · purity\/\/fa2 Eki 2023
CVE-2025-9127
33İzleyin
PX Enterprise Improper Sanitization Vulnerability
YüksekCVSS 8,4İstismar yokEPSS %0
purestorage · portworx4 Ara 2025
CVE-2024-0004
28İzleyin
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
purestorage · purity\/\/fa23 Eyl 2024
CVE-2024-0003
28İzleyin
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array
YüksekCVSS 7,2İstismar yokEPSS %0
purestorage · purity\/\/fa23 Eyl 2024
CVE-2017-7352
21İzleyin
Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web scrip
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
purestorage · purity11 Eki 2017
CVE-2023-32572
19İzleyin
FlashArray pgroup Retention Lock SafeMode Protection
OrtaCVSS 4,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
purestorage · purity\/\/fa2 Eki 2023
CVE-2023-31042
17İzleyin
FlashBlade Object Store Protocol
OrtaCVSS 4,3İstismar yokEPSS %0
- Hizmet dışı bırakma
purestorage · purity2 Eki 2023
CVE-2023-36627
10İzleyin
FlashBlade Snapshot Scheduler
DüşükCVSS 2,7İstismar yokEPSS %0
- Hizmet dışı bırakma
purestorage · purity2 Eki 2023
CVE-2023-28372
10İzleyin
FlashBlade Object Store Privileged Access
DüşükCVSS 2,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
purestorage · purity2 Eki 2023
CVE-2023-28373
10İzleyin
FlashArray SafeMode Immutable Vulnerability
DüşükCVSS 2,7İstismar yokEPSS %0
- Hizmet dışı bırakma
purestorage · purity\/\/fa2 Eki 2023