CVE-2025-12874: HTTP Request Smuggling in Quest Coexistence Manager for Notes
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding (CL.TE) attack vector. This could allow an attacker to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests. This issue affects Coexistence Manager for Notes 3.8.2045. Other versions may also be affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12874?
CVE-2025-12874 is classified as a high severity vulnerability due to its potential for HTTP request smuggling attacks.
How do I fix CVE-2025-12874?
To mitigate CVE-2025-12874, update Quest Coexistence Manager for Notes to the latest version provided by the vendor.
What impact does CVE-2025-12874 have on my system?
CVE-2025-12874 can allow attackers to perform HTTP request smuggling, potentially leading to unauthorized access or data manipulation.
Which versions of Quest Coexistence Manager for Notes are affected by CVE-2025-12874?
CVE-2025-12874 affects the Free/Busy Connector modules in Quest Coexistence Manager for Notes.
Is CVE-2025-12874 being actively exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2025-12874, but caution is advised.