8.7
/ 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.
AI Analysis
Insufficient filtering of data paths exposes sensitive information to low-privileged authenticated users
Basic Information
ID
CVE-2026-6445
Source
Everpure
Published
Jun 9, 2026 at 18:40
Modified
Jun 9, 2026 at 20:03
Affected Product
Vendor
Everpure
Product
FlashArray
Version
6.5.0, 6.10.0
Affected Versions
Everpure FlashArray 6.5.0
Everpure FlashArray 6.10.0
Everpure FlashArray 6.10.0
CWE Classification
AI Assessment
AI Score
8.7 / 10
AI Severity
High
Vendor
Pure Storage
Product
FlashArray
Version
6.5.0, 6.10.0