CVE-2025-28245: Alteryx Server

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.

Affected products

• Alteryx Alteryx Server: version 2023.1.1.460 only

Published 2025-07-10. Last modified 2026-06-17.