CVE-2018-12469

HIGH 7.5CVE-2018-12469 · Published 12/10/2018 · updated 17/06/2026

In short

CVE-2018-12469 is a HIGH (CVSS 7.5) vulnerability affecting enterprise developer (microfocus), enterprise server (microfocus).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise developer microfocus	`= 2.3= 3.0= 4.0≤ 2.3`	No fix yet
enterprise server microfocus	`= 2.3= 3.0= 4.0≤ 2.3`	No fix yet

Description

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.

References

community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29624/enterprise-server-security-fix-october-2018

More vulnerabilities in enterprise developer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2018-12469 is a HIGH (CVSS 7.5) vulnerability affecting enterprise developer (microfocus), enterprise server (microfocus).

Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.4% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

enterprise developer

microfocus

= 2.3= 3.0= 4.0≤ 2.3

No fix yet

enterprise server

microfocus

= 2.3= 3.0= 4.0≤ 2.3

No fix yet

Description

More vulnerabilities in enterprise developer

See all →