5.1
Medium
CVE-2025-12453 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™…
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Vertica 25.3 | 25.3.0 → 25.3.x | No fix stated |
| Vertica 25.2 | 25.2.0 → 25.2.x | No fix stated |
| Vertica 25.1 | 25.1.0 → 25.1.x | No fix stated |
| Vertica 24.0 | 24.0 → 24.x | No fix stated |
| Vertica 23.0 | 23.0 → 23.x | No fix stated |
| Vertica 12.0 | 12.0 → 12.x | No fix stated |
| Vertica 11.0 | 11.0 → 11.x | No fix stated |
| Vertica 10.0 | 10.0 → 10.x | No fix stated |
Other CVEs of Vertica
The 5 CVEs of Vertica →
CVE-2025-12454
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™…
5.1
Medium
CVE-2025-12455
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing. The vulnerability…
5.1
Medium
CVE-2024-9432
Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. …
6.9
Medium
CVE-2024-6360
Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and…
6.9
Medium