CVE-2025-12874CWE-444

HTTP Request Smuggling in Quest Coexistence Manager for Notes

Medium · published December 19, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding (CL.TE) attack vector. This could allow an attacker to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests. This issue affects Coexistence Manager for Notes 3.8.2045. Other versions may also be affected.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/U:Clear
EPSS
0.00497 · 41.7th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2025-12-19T19:36Z
EPSS history
Timeline
  • 19 DEC 19:36Z
    HTTP Request Smuggling in Quest Coexistence Manager for Notes
    cvelistv5