CVE Feed

    Dashboard / CVE / CVE-2025-12454

    CVE-2025-12454

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.

    Published:Mar 13, 2026
    Last Modified:Apr 17, 2026
    EPS:Mar 13, 2026
    EPSS Score:0.00067
    CVSS Score:6.1

    Affected Products

    Vendor
    Opentext
    Product
    Vertica

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-12453 (CVSS 5.1) — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText…
    CVE-2025-12455 (CVSS 5.1) — Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulner…
    CVE-2024-9432 (CVSS 6.9) — Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensiti…
    CVE-2024-6360 (CVSS 6.9) — Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege…
    CVE-2023-7248 (CVSS 5) — Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  …
    CVE-2017-5802 (CVSS 9.8) — A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was fou…
    CVE-2016-2002 (CVSS 9.8) — The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.…
    CVE-2015-6867 (CVSS 7.5) — The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote at…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High