What is CVE-2018-12469?

CVE-2018-12469 is a high-severity vulnerability in Micro Focus Enterprise Developer, Server, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2018-10-12.

How severe is CVE-2018-12469?

High severity. CVSS v3 base score is 7.5 out of 10.

NULL pointer dereference in Micro Focus Enterprise Developer, Server

CVE-2018-12469

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Upd…

EPSS: 0.011 (60.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Micro Focus Enterprise Developer, Server — versions All versions before 3.0 Patch Update 12, 4.0 Patch Update 2, 5.0
Microfocus Enterprise_developer — versions 2.3, 3.0, 4.0
Microfocus Enterprise_server — versions 2.3, 3.0, 4.0

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-12469?: CVE-2018-12469 is a high-severity vulnerability in Micro Focus Enterprise Developer, Server, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2018-10-12.
How severe is CVE-2018-12469?: High severity. CVSS v3 base score is 7.5 out of 10.