Cross-Site Scripting Vulnerability in OpenText Vertica
CVE-2025-12453

5.1MEDIUM

Key Information:

Vendor

Opentext™

Status
Vertica
Vendor
CVE Published:
13 March 2026

What is CVE-2025-12453?

A vulnerability exists in OpenText Vertica due to improper neutralization of input during web page generation, allowing malicious actors to launch reflected cross-site scripting (XSS) attacks. This flaw specifically affects the Vertica management console, creating potential security risks for its users. By exploiting this vulnerability, attackers can execute arbitrary scripts in the user's web browser, compromising user data and potentially leading to unauthorized access or manipulation of sensitive information.

Affected Version(s)

Vertica 10.0 <= 10.x

Vertica 11.0 <= 11.x

Vertica 12.0 <= 12.x

References

https://portal.microfocus.com/s/article/KM000045852?langu...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.