CVE-2018-12469
Last modified
CVE-2018-12469 is a vulnerability of currently unknown severity. Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microfocus | Enterprise Developer | <= 2.3 | — |
| Microfocus | Enterprise Developer | 2.3 | Update1 |
| Microfocus | Enterprise Developer | 3.0 | — |
| Microfocus | Enterprise Developer | 4.0 | — |
| Microfocus | Enterprise Server | <= 2.3 | — |
| Microfocus | Enterprise Server | 2.3 | Update1 |
| Microfocus | Enterprise Server | 3.0 | — |
| Microfocus | Enterprise Server | 4.0 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12469?
How severe is CVE-2018-12469?
How do I fix CVE-2018-12469?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12463An XML external entity (XXE) vulnerability in Fortify Softwa…9.8
- CVE-2018-12464A SQL injection vulnerability in the web administration and …10
- CVE-2018-12465An OS command injection vulnerability in the web administrat…9.1
- CVE-2018-12466openSUSE openbuildservice before 9.2.4 allowed authenticated…4.4
- CVE-2018-12467Authorized users of the openbuildservice before 2.9.4 could …6
- CVE-2018-12468A vulnerability in the administration console of Micro Focus…9.1
- CVE-2018-1247RSA Authentication Manager Security Console, version 8.3 and…
- CVE-2018-12470A SQL Injection in the RegistrationSharing module of SUSE Li…9.8
- CVE-2018-12471A External Entity Reference ('XXE') vulnerability in SUSE Li…6.5
- CVE-2018-12472A improper authentication using the HOST header in SUSE Linu…7.3
- CVE-2018-12473A path traversal traversal vulnerability in obs-service-tar_…3.1
- CVE-2018-12474Improper input validation in obs-service-tar_scm of Open Bui…5.4
Are you affected by CVE-2018-12469?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST