<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: purity</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-36627: A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade tha</title><link>https://patchthecve.com/cve/CVE-2023-36627.html</link><guid>https://patchthecve.com/cve/CVE-2023-36627.html</guid><pubDate>Wed, 17 Jun 2026 06:06:41 +0000</pubDate><description>HIGH 7.7: A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly. 
</description></item><item><title>CVE-2023-31042: A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store prot</title><link>https://patchthecve.com/cve/CVE-2023-31042.html</link><guid>https://patchthecve.com/cve/CVE-2023-31042.html</guid><pubDate>Wed, 17 Jun 2026 05:56:09 +0000</pubDate><description>HIGH 7.7: A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols. 

</description></item><item><title>CVE-2023-28372: A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s ret</title><link>https://patchthecve.com/cve/CVE-2023-28372.html</link><guid>https://patchthecve.com/cve/CVE-2023-28372.html</guid><pubDate>Wed, 17 Jun 2026 05:47:34 +0000</pubDate><description>MEDIUM 6.5: A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can  affect the availability of the object lock.
</description></item><item><title>CVE-2017-7352: Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users</title><link>https://patchthecve.com/cve/CVE-2017-7352.html</link><guid>https://patchthecve.com/cve/CVE-2017-7352.html</guid><pubDate>Wed, 17 Jun 2026 01:24:10 +0000</pubDate><description>MEDIUM 5.4: Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the &quot;host&quot; parameter on the &#x27;System &gt; Configuration &gt; SNMP &gt; Add SNMP Trap Manager&#x27; screen.</description></item><item><title>CVE-2002-1124: Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.</title><link>https://patchthecve.com/cve/CVE-2002-1124.html</link><guid>https://patchthecve.com/cve/CVE-2002-1124.html</guid><pubDate>Tue, 16 Jun 2026 21:58:46 +0000</pubDate><description>HIGH 7.2: Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.</description></item></channel></rss>