Observable Response Discrepancy Vulnerability in OpenText Vertica Management Console
CVE-2025-12455

5.1MEDIUM

Key Information:

Vendor

Opentext™

Status
Vertica
Vendor
CVE Published:
13 March 2026

What is CVE-2025-12455?

An observable response discrepancy in OpenText Vertica allows attackers to exploit the management console, facilitating password brute forcing attempts. This issue affects multiple versions of the Vertica software, potentially compromising user accounts and sensitive data. Organizations using affected versions should take immediate actions to strengthen their authentication mechanisms and mitigate risks associated with unauthorized access.

Affected Version(s)

Vertica 10.0 <= 10.x

Vertica 11.0 <= 11.x

Vertica 12.0 <= 12.x

References

https://portal.microfocus.com/s/article/KM000045854?langu...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.