What’s Vulnerable › Vulnerabilities
CVE-2025-12453: Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-13 · updated 2026-06-17
- Weakness: CWE-79
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.
Affected products
- OpenText™ Vertica: from 10.0.0-0 before 25.4.0-0 — fixed in 25.4.0-0
How to fix
Upgrade to a fixed version: OpenText™ Vertica 25.4.0-0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-12453 or the next vulnerability affects your stack