Vulnerabilities > CVE-2018-12469 - NULL Pointer Dereference vulnerability in Microfocus Enterprise Developer and Enterprise Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
microfocus
CWE-476
NVD
Published: 2018-10-12
Updated: 2023-11-07

Summary

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.

Vulnerable Configurations

Part Description Count
Application
Microfocus
34

Common Weakness Enumeration (CWE)

References