Approved changes feed: RSS · Atom

cpe:2.3:a:purestorage:flasharray:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPurestorage (9c1f0ce0-bffe-5be6-a7df-d16119844a3d)
ProductFlasharray (f7fd994e-eaf1-5675-9d5d-69af25b38fe0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0209 vulnerable 2026-06-08 07:47:10.769878 Details available
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
Published: 2026-04-14T17:52:54.759Z
Updated: 2026-04-14T21:56:10.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3057 vulnerable 2026-06-08 06:41:52.327628 Details available
CRITICAL (9.8)
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
Published: 2024-10-08T16:50:09.594Z
Updated: 2025-04-10T14:19:42.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0005 vulnerable 2026-06-08 06:21:57.665442 Details available
CRITICAL (9.1)
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.
Published: 2024-09-23T17:34:11.321Z
Updated: 2024-09-24T13:49:20.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0004 vulnerable 2026-06-08 06:21:57.655247 Details available
CRITICAL (9.1)
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
Published: 2024-09-23T17:28:53.664Z
Updated: 2024-09-24T13:37:36.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0003 vulnerable 2026-06-08 06:21:57.647076 Details available
CRITICAL (9.1)
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.
Published: 2024-09-23T17:27:30.114Z
Updated: 2024-09-24T13:28:44.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0002 vulnerable 2026-06-08 06:21:57.644470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.