Log in Start free

Vulnerability · Published Mar 13, 2026 · Assigned by OpenText

CVE-2025-12453Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.

Medium 5.1

In plain English

A medium-severity cross-site scripting in Vertica from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.

Affected products (as reported)

VendorProductVersions
OpenText™ Vertica 10.0 – through 10.x11.0 – through 11.x12.0 – through 12.x23.0 – through 23.x24.0 – through 24.x25.1.0 – through 25.1.x25.2.0 – through 25.2.x25.3.0 – through 25.3.x

Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:U

References