Pure Storage

Products

ProductCVEsExploitedLatest
FlashArray3–Jun 16, 2025
FlashArray Purity3–Oct 2, 2023
FlashBlade2–Jun 10, 2025
FlashBlade Purity2–Oct 2, 2023
PX Backup1–May 19, 2025
PX Enterprise1–Dec 4, 2025

Exploited and recent CVEs

  • CVE-2025-9127 High 8.4 PX Enterprise Improper Sanitization Vulnerability 0.1%
  • CVE-2025-2327 Medium 5.1 FlashArray KEK Logging Vulnerability 0.2%
  • CVE-2025-0052 High 8.3 FlashBlade DOS Vulnerability 0.3%
  • CVE-2025-0051 High 8.7 FlashArray DOS Vulnerability 0.4%
  • CVE-2025-1308 High 8.4 PX Backup Improper Sanitization Vulnerability 0.2%
  • CVE-2024-0001 Critical 10.0 A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges. 0.9%
  • CVE-2023-36628 High 8.8 Privilege Escalation in VASA 0.6%
  • CVE-2023-32572 Medium 6.5 FlashArray pgroup Retention Lock SafeMode Protection 0.5%
  • CVE-2023-28373 Medium 4.4 FlashArray SafeMode Immutable Vulnerability 0.5%
  • CVE-2023-36627 High 7.7 FlashBlade Snapshot Scheduler 0.6%
  • CVE-2023-31042 High 7.7 FlashBlade Object Store Protocol 0.6%
  • CVE-2023-28372 Medium 6.5 FlashBlade Object Store Privileged Access 0.5%