CVEvulnerability

CVE-2018-12469

7.5 HIGH Published 2018-10-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.

Affected configurations

• microfocus enterprise developer (<= 2.3) • microfocus enterprise developer 2.3 • microfocus enterprise developer 3.0 • microfocus enterprise developer 4.0 • microfocus enterprise server (<= 2.3) • microfocus enterprise server 2.3 • microfocus enterprise server 3.0 • microfocus enterprise server 4.0

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References