Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:vertica:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductVertica (9bf12aee-b645-5155-8de1-cc3d811ff18f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12455 vulnerable 2026-06-08 07:04:30.262213 Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute Forcing in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X.
Published: 2026-03-13T18:30:27.903Z
Updated: 2026-03-13T19:33:40.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12454 vulnerable 2026-06-08 07:04:30.261711 Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.
Published: 2026-03-13T18:30:40.822Z
Updated: 2026-03-13T19:33:59.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12453 vulnerable 2026-06-08 07:04:30.261237 Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.
Published: 2026-03-13T18:30:53.495Z
Updated: 2026-03-13T19:34:21.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6360 vulnerable 2026-06-08 06:58:18.752855 Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.
Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica agent apikey. This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X.
Published: 2024-10-02T15:19:15.457Z
Updated: 2024-10-02T16:30:37.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7248 vulnerable 2026-06-08 06:21:57.405977 OpenText Vertica Management console might be prone to bypass via crafted requests
MEDIUM (5)
Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x
Published: 2024-03-15T19:30:27.419Z
Updated: 2024-08-02T08:57:35.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5802 vulnerable 2026-06-08 05:09:49.855062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2002 vulnerable 2026-06-08 05:07:32.622592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.