TI-2025-13775 CVE-2025-15097 · GHSA-4vwr-f92g-29m6
Alteryx Server status improper authentication
Priority HIGH 70
A vulnerability was found in Alteryx Server.
Vulnerabilities
6 records
TI-2025-39271 CVE-2025-63291 · GHSA-3cvf-5chq-5r99
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB…
Priority MEDIUM 58
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.
TI-2025-20764 CVE-2025-28245 · GHSA-mx92-jfpg-3r7q
Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote…
Priority MEDIUM 60
Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.
TI-2025-20763 CVE-2025-28244 · GHSA-v487-q9c3-h72w
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460…
Priority HIGH 73
Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to account takeover
TI-2025-20762 CVE-2025-28243 · GHSA-fw9g-8g64-6pmj
An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
Priority HIGH 68
An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.
TI-2023-11845 CVE-2023-26961 · GHSA-w43g-7q27-j39g
Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files.
Priority MEDIUM 55
Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files.