CVE-2025-12454CWE-79

Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.

Medium · published March 13, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.

The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:U
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-03-13T18:30Z
EPSS history
Timeline
  • 13 MAR 18:30Z
    Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
    cvelistv5