What is CVE-2025-12453?

CVE-2025-12453 is a medium-severity vulnerability in Opentext Vertica, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-13.

How severe is CVE-2025-12453?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Opentext Vertica

CVE-2025-12453

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2026-03-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.002 (6.9th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 7th percentile — 6.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

Opentext Vertica
Opentext™ Vertica — versions 10.0, 11.0, 12.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

portal.microfocus.com/s/article/KM000045852 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-12453?: CVE-2025-12453 is a medium-severity vulnerability in Opentext Vertica, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-13.
How severe is CVE-2025-12453?: Medium severity. CVSS v3 base score is 6.1 out of 10.