Search for vulnerabilities
Vulnerability details: VCID-w9p5-ey45-mqck
Vulnerability ID VCID-w9p5-ey45-mqck
Aliases CVE-2012-4557
Summary A flaw was found when mod_proxy_ajp connects to a backend server that takes too long to respond. Given a specific configuration, a remote attacker could send certain requests, putting a backend server into an error state until the retry timeout expired. This could lead to a temporary denial of service.
Status Published
Exploitability 0.5
Weighted Severity 2.1
Risk 1.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.22538 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.22538 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.22538 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
epss 0.3781 https://api.first.org/data/v1/epss?cve=CVE-2012-4557
apache_httpd low https://httpd.apache.org/security/json/CVE-2012-4557.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4557.json
https://api.first.org/data/v1/epss?cve=CVE-2012-4557
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4557
871685 https://bugzilla.redhat.com/show_bug.cgi?id=871685
CVE-2012-4557 https://httpd.apache.org/security/json/CVE-2012-4557.json
RHSA-2013:0512 https://access.redhat.com/errata/RHSA-2013:0512
USN-1765-1 https://usn.ubuntu.com/1765-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95648
EPSS Score 0.22538
Published At Aug. 1, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:57.201968+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2012-4557.json 37.0.0