Security Alert CVE-2025-12455

Vertiguy

Security alert

Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. The vulnerability could lead to Password Brute Forcing.

Systems affected:
Vertica version/s 10.x, 11.x, and 12.x

Affected version:
Username Enumeration Observable Response Discrepancy vulnerability affects OpenText Vertica versions 10.x, 11.x, and 12.x

CVE reference: CVE-2025-12455

CVSS v4.0 score: 5.1 / Medium

Impact:
The vulnerability could lead to Password Brute Forcing in Vertica management console application.

Solution:
For all Vertica versions prior to 23.3.x, customers need to upgrade to Vertica 23.3.0-0 or later.

More information
For more information, contact us through the Support Portal.

Copyright © 2024 Open Text. All rights reserved. OpenText is a trademark or registered trademark of Open Text. The list of trademarks is not exhaustive of other trademarks. Registered trademarks, product names, company names, brands and service names mentioned herein are property of Open Text or other respective owners.