Everpure vulnerabilities
We track 3 vulnerabilities in Everpure products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Everpure vulnerabilities
- 7.7 High severity
Portworx Operator: Incorrect Privilege Assignment
A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause
- 8.7 High severity
FlashArray: Improper Authorization in Handler for Custom URL Scheme
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.
- 8.6 High severity
FlashArray: Authorization Bypass Through User-Controlled Key
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.