ByteOS Network

NVD Vulnerability Details :

CVE-2025-12874

Awaiting Analysis

Source-57dba5dd-1a03-47f6-8b36-e84e47d335d8

Published At-19 Dec, 2025 | 20:15

Updated At-23 Dec, 2025 | 14:52

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding (CL.TE) attack vector. This could allow an attacker to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests. This issue affects Coexistence Manager for Notes 3.8.2045. Other versions may also be affected.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	6.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear

Type: Secondary

Version: 4.0

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear

Weaknesses

CWE ID	Type	Source
CWE-444	Secondary	57dba5dd-1a03-47f6-8b36-e84e47d335d8

CWE ID: CWE-444

Type: Secondary

Source: 57dba5dd-1a03-47f6-8b36-e84e47d335d8

References

Hyperlink	Source	Resource
https://sra.io/advisories/	57dba5dd-1a03-47f6-8b36-e84e47d335d8	N/A
https://support.quest.com/coexistence-manager-for-notes/3.10	57dba5dd-1a03-47f6-8b36-e84e47d335d8	N/A

Hyperlink: https://sra.io/advisories/

Source: 57dba5dd-1a03-47f6-8b36-e84e47d335d8

Resource: N/A

Hyperlink: https://support.quest.com/coexistence-manager-for-notes/3.10

Source: 57dba5dd-1a03-47f6-8b36-e84e47d335d8

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History