Vulnerabilities

TI-2025-11428 CVE-2025-12453 · GHSA-6frc-h2x4-jwq3

Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.

LOW 23

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00216 Published 2026-03-13 No fix listed CWE-79

TI-2025-11429 CVE-2025-12454 · GHSA-96v9-4pvw-w72p

Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.

LOW 23

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00216 Published 2026-03-13 No fix listed CWE-79

TI-2025-11430 CVE-2025-12455 · GHSA-phcr-v9ch-26r8

Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.

LOW 29

Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00351 Published 2026-03-13 No fix listed CWE-204

TI-2024-05902 CVE-2024-6360 · GHSA-856w-qx7w-v664

Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.

LOW 30

Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica agent apikey.

CVSS 4.0MEDIUM 6.9 Local High privileges No interaction EPSS 0.00308 Published 2024-10-02 No fix listed CWE-732

TI-2023-06632 CVE-2023-7248 · GHSA-5527-m9v4-67gx

OpenText Vertica Management console might be prone to bypass via crafted requests

MEDIUM 43

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00317 Published 2024-03-15 No fix listed CWE-20

TI-2017-03740 CVE-2017-5802 · GHSA-mrfr-p4j4-54cw

A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found.

MEDIUM 46

A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02263 Published 2018-02-15 No fix listed

TI-2016-01835 CVE-2016-2002 · GHSA-q4wv-9qjh-5mhq

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x…

MEDIUM 48

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPo…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03086 Published 2016-04-20 No fix listed CWE-77

TI-2015-05761 CVE-2015-6867 · GHSA-429j-47h7-hxx4

The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication…

MEDIUM 40

The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04712 Published 2015-11-04 No fix listed CWE-284

Vulnerabilities

Filters