What is CVE-2025-12453?

CVE-2025-12453 is a medium-severity vulnerability in Opentext Vertica, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-13.

How severe is CVE-2025-12453?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Opentext Vertica

CVE-2025-12453

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (8.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Opentext Vertica
Opentext™ Vertica — versions 10.0, 11.0, 12.0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@opentext.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-12453?: CVE-2025-12453 is a medium-severity vulnerability in Opentext Vertica, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-03-13.
How severe is CVE-2025-12453?: Medium severity. CVSS v3 base score is 6.1 out of 10.