Pure Storage PX Enterprise up to 3.3.1.2 escape output

Summaryinfo

A vulnerability described as problematic has been identified in Pure Storage PX Enterprise up to 3.3.1.2. Impacted is an unknown function. The manipulation results in escape output. This vulnerability is identified as CVE-2025-9127. The attack is only possible with local access. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Pure Storage PX Enterprise up to 3.3.1.2. Affected is an unknown code block. The manipulation with an unknown input leads to a escape output vulnerability. CWE is classifying the issue as CWE-116. The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. This is going to have an impact on confidentiality. CVE summarizes:

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.

The advisory is shared for download at support.purestorage.com. This vulnerability is traded as CVE-2025-9127 since 08/18/2025. The exploitability is told to be easy. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Pure Storage

Name

• PX Enterprise

Version

• 2.13.0
• 2.13.1
• 2.13.2
• 2.13.3
• 2.13.4
• 2.13.5
• 2.13.6
• 2.13.7
• 2.13.8
• 2.13.9
• 2.13.10
• 2.13.11
• 2.13.12
• 3.0
• 3.1
• 3.1.0
• 3.1.1
• 3.1.2
• 3.1.3
• 3.1.4
• 3.1.5
• 3.1.6
• 3.1.7
• 3.1.8
• 3.2
• 3.2.0
• 3.2.1
• 3.2.2
• 3.2.3
• 3.3.0
• 3.3.1
• 3.3.1.0
• 3.3.1.1
• 3.3.1.2

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion