VE
Product
Vertica
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 3Low 0
Watch
Add Vertica to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6360 | 9.8 | Oct 2 | Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica. Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x |
| CVE-2023-7248 | 9.8 | Mar 15 | OpenText Vertica Management console might be prone to bypass via crafted requests Affected: 10.0.0-0 through 10.1.1-26; 11.0.0-0 before 11.1.1-25; 12.0.0-0 before 12.0.4-19 |
| CVE-2017-5802 | 9.8 | Feb 15 | A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found Affected: before 6.1.3-20; 7.0 before 7.0.2-13; 7.1 before 7.1.2-21; 7.2 before 7.2.3-18; 8.0 before 8.0.1-3; 8.1 before 8.1.0-1 |
| CVE-2016-2002 | 9.8 | Apr 20 | The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers… Affected: 7.0.0 before 7.0.2.12; 7.1.0 before 7.1.2-12; 7.2.0 before 7.2.2-1 |
| CVE-2025-12455 | 7.5 | Mar 13 | Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x |
| CVE-2024-9432 | 6.9 | Jan 30 | Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica. Affected: 23.x; 24.x; 25.x |
| CVE-2025-12453 | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x; 25.1.0 through 25.1.x; +2 more |
| CVE-2025-12454 | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. Affected: 10.0 through 10.x; 11.0 through 11.x; 12.0 through 12.x; 23.0 through 23.x; 24.0 through 24.x; 25.1.0 through 25.1.x |
| CVE-2015-6867 | – | Nov 4 | The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka… Affected: 7.1.1 |
Showing 9
