https://vulnogram.org/ Most recent CVEs assigned by purestorage (purestorage). https://vulnogram.org/seaview/icons/purestorage.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-0207 https://vulnogram.org/CVE-2026-0207 A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions. High Tue, 14 Apr 2026 17:53:42 GMT https://vulnogram.org/CVE-2026-0209 https://vulnogram.org/CVE-2026-0209 Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured. Medium Tue, 14 Apr 2026 17:52:54 GMT https://vulnogram.org/CVE-2025-9127 https://vulnogram.org/CVE-2025-9127 A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions. High Thu, 04 Dec 2025 17:59:39 GMT https://vulnogram.org/CVE-2025-2327 https://vulnogram.org/CVE-2025-2327 A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured. Medium Mon, 16 Jun 2025 16:23:35 GMT https://vulnogram.org/CVE-2025-0052 https://vulnogram.org/CVE-2025-0052 Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service. High Network Exploitable Tue, 10 Jun 2025 17:39:21 GMT https://vulnogram.org/CVE-2025-0051 https://vulnogram.org/CVE-2025-0051 Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service. High Network Exploitable Tue, 10 Jun 2025 17:29:43 GMT https://vulnogram.org/CVE-2025-1308 https://vulnogram.org/CVE-2025-1308 A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. High Mon, 19 May 2025 21:18:33 GMT https://vulnogram.org/CVE-2024-3057 https://vulnogram.org/CVE-2024-3057 A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation. Critical Network Exploitable Tue, 08 Oct 2024 16:50:09 GMT https://vulnogram.org/CVE-2024-0005 https://vulnogram.org/CVE-2024-0005 A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration. Critical Mon, 23 Sep 2024 17:34:11 GMT https://vulnogram.org/CVE-2024-0004 https://vulnogram.org/CVE-2024-0004 A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array. Critical Mon, 23 Sep 2024 17:28:53 GMT https://vulnogram.org/CVE-2024-0003 https://vulnogram.org/CVE-2024-0003 A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access. Critical Mon, 23 Sep 2024 17:27:30 GMT https://vulnogram.org/CVE-2024-0002 https://vulnogram.org/CVE-2024-0002 A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array. Critical Network Exploitable Mon, 23 Sep 2024 17:26:08 GMT https://vulnogram.org/CVE-2024-0001 https://vulnogram.org/CVE-2024-0001 A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges. Critical Network Exploitable Mon, 23 Sep 2024 17:25:00 GMT https://vulnogram.org/CVE-2023-4976 https://vulnogram.org/CVE-2023-4976 A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array. Critical Network Exploitable Wed, 17 Jul 2024 15:25:58 GMT https://vulnogram.org/CVE-2023-36628 https://vulnogram.org/CVE-2023-36628 A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. High Mon, 02 Oct 2023 23:15:28 GMT https://vulnogram.org/CVE-2023-32572 https://vulnogram.org/CVE-2023-32572 A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection. Medium Mon, 02 Oct 2023 23:09:04 GMT https://vulnogram.org/CVE-2023-28373 https://vulnogram.org/CVE-2023-28373 A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode. Medium Mon, 02 Oct 2023 23:02:31 GMT https://vulnogram.org/CVE-2023-36627 https://vulnogram.org/CVE-2023-36627 A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly. High Mon, 02 Oct 2023 22:47:12 GMT https://vulnogram.org/CVE-2023-31042 https://vulnogram.org/CVE-2023-31042 A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols. High Mon, 02 Oct 2023 22:39:02 GMT https://vulnogram.org/CVE-2023-28372 https://vulnogram.org/CVE-2023-28372 A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock. Medium Mon, 02 Oct 2023 22:20:21 GMT