CVE-2024-6360

CVE-2024-6360 describes an Incorrect Permission Assignment in OpenText Vertica that could allow privilege abuse and unauthorized access or privileges to the Vertica agent API key. Affected versions include Vertica 10.0–10.X, 11.0–11.X, 12.0–12.X, 23.0–23.X, and 24.0–24.X. The root cause is an inc...

CVE-2016-2002

CVE-2016-2002 affects Hewlett Packard Enterprise Vertica, specifically the Analytics Management Console’s validateAdminConfig handler. Affected releases include Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1. The vulnerability arises from insufficient input validat...

CVE-2017-5802

CVE-2017-5802 is described in the connected FreeBSD VuXML entry as a vulnerability in LibRaw, specifically the kodak_radc_load_raw() function in internal/dcraw_common.cpp, where the buf variable can trigger an out-of-bounds read and crash the process. No exploitation details or fixes are provided...

CVE-2015-6867

The CVE-2015-6867 issue affects HP Vertica, specifically the vertica-udx-zygote process in Vertica 7.1.1 UDx. The root cause is that this process does not require authentication, allowing an unauthenticated, remote attacker to send a crafted packet that executes arbitrary commands under the dbadm...

CVE-2023-7248

OpenText Vertica Management Console vulnerabilities: CVE-2023-7248 involves bypassing an authentication check via crafted requests. Affected versions are 10.x, 11.1.1-24 or lower, and 12.0.4-18 or lower. Remediation options include upgrading to 11.1.1-25, 12.0.4-19, or moving to newer 23.x/24.x b...

CVE-2025-12453

CVE-2025-12453 describes an improper neutralization of input during web page generation that enables a Reflected XSS in the OpenText Vertica management console. Affected software ranges across Vertica versions: 10.0–10.x, 11.0–11.x, 12.0–12.x, 23.0–23.x, 24.0–24.x, 25.1.0–25.1.x, 25.2.0–25.2.x, a...

CVE-2025-12455

CVE-2025-12455 is an observable response discrepancy vulnerability in OpenText Vertica, enabling password brute forcing in the Vertica management console. Affected versions are Vertica 10.0–10.X, 11.0–11.X, and 12.0–12.X. The provided connected sources describe the issue as a username/password en...

CVE-2025-12454

CVE-2025-12454 affects OpenText Vertica via an input handling flaw in the web page generation of the management console, causing a Reflected XSS vulnerability. Affected versions span Vertica 10.0–10.X, 11.0–11.X, 12.0–12.X, 23.0–23.X, 24.0–24.X, and 25.1.0–25.1.X. The published CVSS score is 5.1 ...