VE
Product
Vertica
by OpenText™ · last CVE Mar 13, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 3Low 0
Watch

Add Vertica to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6360
9.8
0%
Oct 2
Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.
Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x
CVE-2023-7248
9.8
0%
Mar 15
OpenText Vertica Management console might be prone to bypass via crafted requests
Affected: 10.0.0-0 through 10.1.1-26; 11.0.0-0 before 11.1.1-25; 12.0.0-0 before 12.0.4-19
CVE-2017-5802
9.8
2%
Feb 15
A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found
Affected: before 6.1.3-20; 7.0 before 7.0.2-13; 7.1 before 7.1.2-21; 7.2 before 7.2.3-18; 8.0 before 8.0.1-3; 8.1 before 8.1.0-1
CVE-2016-2002
9.8
3%
Apr 20
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers…
Affected: 7.0.0 before 7.0.2.12; 7.1.0 before 7.1.2-12; 7.2.0 before 7.2.2-1
CVE-2025-12455
7.5
0%
Mar 13
Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x
CVE-2024-9432
6.9
0%
Jan 30
Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.
Affected: 23.x; 24.x; 25.x
CVE-2025-12453
6.1
0%
Mar 13
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x; 25.1.0 through 25.1.x; +2 more
CVE-2025-12454
6.1
0%
Mar 13
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x; 25.1.0 through 25.1.x
CVE-2015-6867
–
5%
Nov 4
The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka…
Affected: 7.1.1
Showing 9