Alteryx Server Improper Auth /gallery/api/status/ Fixed in 2025.1.1.1.31
CVE-2025-15097 Published on December 26, 2025
Alteryx Server status improper authentication
A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 2023.1.1.13.486, 2023.2.1.10.293, 2024.1.1.9.236, 2024.2.1.6.125 and 2025.1.1.1.31 can resolve this issue. Upgrading the affected component is recommended.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Type
What is an authentification Vulnerability?
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVE-2025-15097 has been classified to as an authentification vulnerability or weakness.
Products Associated with CVE-2025-15097
Want to know whenever a new CVE is published for Alteryx Server? stack.watch will email you.
Affected Versions
Alteryx Server:- Version 2020.2.3.27789 is affected.
- Version 2021.4.2.47895 is affected.
- Version 2022.1.1.30961 is affected.
- Version 2022.1.1.42707 is affected.
- Version 2023.1.1.123 is affected.
- Version 2023.1.1.306 is affected.
- Version 2023.2.1.51 is affected.
- Version 2024.1.1.49 is affected.
- Version 2024.1.1.136 is affected.
- Version 2024.1.1.209 is affected.
- Version 2024.2.1.14 is affected.
- Version 2024.2.1.41 is affected.
- Version 2024.2.1.73 is affected.
- Version 2024.2.1.94 is affected.
- Version 2023.1.1.13.486 is unaffected.
- Version 2023.2.1.10.293 is unaffected.
- Version 2024.1.1.9.236 is unaffected.
- Version 2024.2.1.6.125 is unaffected.
- Version 2025.1.1.1.31 is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.