SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2012-4534

LOW · CVSS 2.6 EPSS 7.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-12-19 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. It affects Apache, Java. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2012-4534
Severity
LOW
CVSS
2.6
EPSS
7.45%
Apache Java

Original NVD Description

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.