PureStorage FlashArray vulnerabilities
6 published CVEs name PureStorage FlashArray among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 5Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-0209
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
PureStorage · FlashArray
Medium6.9 - CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
PureStorage · FlashArray
Critical9.8 - CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP…
PureStorage · FlashArray
Critical9.1 - CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
PureStorage · FlashArray
Critical9.1 - CVE-2024-0003
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing…
PureStorage · FlashArray
Critical9.1 - CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.
PureStorage · FlashArray
Critical10.0