CVE-2025-12454: Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12454?
The severity of CVE-2025-12454 is classified as high due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2025-12454?
To fix CVE-2025-12454, update OpenText Vertica to the latest version that addresses this vulnerability.
What versions of OpenText Vertica are affected by CVE-2025-12454?
CVE-2025-12454 affects OpenText Vertica versions 10.X, 11.X, 12.X, 23.X, 24.X, and 25.1.X.
What type of attack does CVE-2025-12454 enable?
CVE-2025-12454 enables reflected cross-site scripting (XSS) attacks.
Is there a workaround for CVE-2025-12454?
Currently, there are no well-documented workarounds for CVE-2025-12454, and updating to a secure version is recommended.