Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-12874 EUVD-2025-204611GHSA-rcrh-rjwq-6v33

HTTP Request Smuggling in Quest Coexistence Manager for Notes

Published Dec 19, 2025 · Updated Dec 19, 2025 · Assigned by SRA

Description

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP Request Smuggling via the Content-Length-Transfer-Encoding (CL.TE) attack vector. This could allow an attacker to bypass access controls, poison web caches, hijack sessions, or trigger unintended internal requests. This issue affects Coexistence Manager for Notes 3.8.2045. Other versions may also be affected.

Affected products

VendorProductAffectedFixed
Quest Coexistence Manager for Notes 3.8.2045 —

References