CVE-2012-4558: Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interfa...

Security readout for executives and security teams

This is a stored or reflected web browser attack risk in Apache HTTP Server’s mod_proxy_balancer manager interface. If an exposed vulnerable manager page receives a crafted string, an attacker could make a victim’s browser run attacker-controlled script or HTML in that interface’s context. Exposure is most likely where Apache httpd runs mod_proxy_balancer and its balancer manager interface is enabled or reachable. The provided record does not identify affected distribution package names beyond vendor advisories. Treat this as a targeted web administration interface issue. It is not marked KEV in the bundle, but exposed Apache balancer manager pages should be patched and access-controlled promptly because XSS can support credential theft or administrator session abuse. Mitigation focus: Upgrade Apache httpd to a vendor-fixed release for the installed branch.; For 2.4.x, verify the environment is at least 2.4.4 or vendor-patched.; For 2.2.x, use distributor guidance for the backported fix level..

Prepared

Jun 15, 2026, 04:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.