CVE-2018-12469

State: Published
Severity: Not scored
Published: Oct 12, 2018
Updated: Sep 16, 2024
Reserved: Jun 15, 2018

Description

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.

Scores

The record has no CVSS score.

Weaknesses

CWE-476 NULL Pointer Dereference (CWE-476)

Affected Products

Product	Versions
Micro Focus Enterprise Developer, Micro Focus Enterprise ServerMicro Focus	All versions before 3.0 Patch Update 12, 4.0 Patch Update 2, 5.0Affected

References

https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29624/enterprise-server-security-fix-october-2018

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.