CVE-2025-12453: Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12453?
CVE-2025-12453 is classified as a high severity vulnerability due to its potential for exploiting reflected cross-site scripting.
How do I fix CVE-2025-12453?
To fix CVE-2025-12453, it is essential to sanitize and properly filter user inputs within OpenText Vertica.
What type of attacks can CVE-2025-12453 lead to?
CVE-2025-12453 can lead to reflected cross-site scripting (XSS) attacks, allowing attackers to execute scripts in the context of the user's browser.
Which software is affected by CVE-2025-12453?
CVE-2025-12453 affects OpenText™ Vertica across all versions.
How does CVE-2025-12453 exploit input handling vulnerabilities?
CVE-2025-12453 exploits input handling vulnerabilities by improperly neutralizing user input during web page generation, allowing malicious scripts to execute.