Alteryx

6 CVEs across 2 Alteryx products. Browse Alteryx vulnerabilities, severities, and proof-of-concept exploits.

Alteryx products with known CVEs

ProductCVEs
Alteryx Server5
Server1
Alteryx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-15097High7.32025-12-26A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation res…
CVE-2025-63291Medium5.42025-11-14When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller…
CVE-2025-28245Medium6.12025-07-10Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification bod…
CVE-2025-28244High8.82025-07-10Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localSt…
CVE-2025-28243High8.02025-07-10An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
CVE-2023-26961Medium4.82023-08-08Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability allows attackers to upload arbitrary files (e.g., J…