Purity Security Vulnerabilities and Issues — Purity CVE List

Lucene search

PurestoragePurity

4 matches found

CVE•added 2023/10/02 11:15 p.m.•55 views

CVE-2023-36627

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.

7.7CVSS4.6AI score0.00038EPSS

CVE•added 2023/10/02 11:15 p.m.•51 views

CVE-2023-28372

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

6.5CVSS4.4AI score0.00031EPSS

CVE•added 2023/10/02 11:15 p.m.•38 views

CVE-2023-31042

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

7.7CVSS5.1AI score0.00056EPSS

CVE•added 2017/10/11 6:29 a.m.•32 views

CVE-2017-7352

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen.

5.4CVSS5AI score0.0015EPSS