Alteryx

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Alteryx records in CISA KEV

No Alteryx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alteryx Server 5 records HIGH

Records

6 records

TI-2025-20763 CVE-2025-28244 · GHSA-v487-q9c3-h72w

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460…

HIGH 73

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00514 Published 2025-07-10 No fix listed CWE-922

TI-2025-13775 CVE-2025-15097 · GHSA-4vwr-f92g-29m6

Alteryx Server status improper authentication

HIGH 70

A vulnerability was found in Alteryx Server.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00589 Published 2025-12-26 Fixed in 2023.1.1.13.486, 2023.2.1.10.293 +3 CWE-287

TI-2025-20762 CVE-2025-28243 · GHSA-fw9g-8g64-6pmj

An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.

HIGH 68

An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00359 Published 2025-07-10 No fix listed CWE-79

TI-2025-20764 CVE-2025-28245 · GHSA-mx92-jfpg-3r7q

Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote…

MEDIUM 60

Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00311 Published 2025-07-10 No fix listed CWE-79

TI-2025-39271 CVE-2025-63291 · GHSA-3cvf-5chq-5r99

When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB…

MEDIUM 58

When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-11-14 No fix listed CWE-648

TI-2023-11845 CVE-2023-26961 · GHSA-w43g-7q27-j39g

Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files.

MEDIUM 55

Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0048 Published 2023-08-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0