Search for vulnerabilities
Vulnerability details: VCID-pb7u-beyt-fbet
Vulnerability ID VCID-pb7u-beyt-fbet
Aliases CVE-2025-47905
Summary content spoofing
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
System Score Found at
cvssv3 8.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47905.json
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2025-47905
archlinux High https://security.archlinux.org/AVG-2879
cvssv3.1 5.4 https://varnish-cache.org/security/VSV00016.html
ssvc Track https://varnish-cache.org/security/VSV00016.html
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47905.json
https://api.first.org/data/v1/epss?cve=CVE-2025-47905
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47905
https://lists.debian.org/debian-lts-announce/2025/05/msg00040.html
http://www.openwall.com/lists/oss-security/2025/05/15/2
2364235 https://bugzilla.redhat.com/show_bug.cgi?id=2364235
ASA-202505-13 https://security.archlinux.org/ASA-202505-13
AVG-2879 https://security.archlinux.org/AVG-2879
CVE-2025-47905 https://nvd.nist.gov/vuln/detail/CVE-2025-47905
RHSA-2025:8294 https://access.redhat.com/errata/RHSA-2025:8294
RHSA-2025:8310 https://access.redhat.com/errata/RHSA-2025:8310
RHSA-2025:8336 https://access.redhat.com/errata/RHSA-2025:8336
RHSA-2025:8337 https://access.redhat.com/errata/RHSA-2025:8337
RHSA-2025:8339 https://access.redhat.com/errata/RHSA-2025:8339
RHSA-2025:8340 https://access.redhat.com/errata/RHSA-2025:8340
RHSA-2025:8349 https://access.redhat.com/errata/RHSA-2025:8349
RHSA-2025:8350 https://access.redhat.com/errata/RHSA-2025:8350
RHSA-2025:8351 https://access.redhat.com/errata/RHSA-2025:8351
RHSA-2025:8550 https://access.redhat.com/errata/RHSA-2025:8550
VSV00016.html https://varnish-cache.org/security/VSV00016.html
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47905.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Found at https://varnish-cache.org/security/VSV00016.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T14:15:16Z/ Found at https://varnish-cache.org/security/VSV00016.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.14954
EPSS Score 0.00049
Published At July 8, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T11:53:19.381797+00:00 Arch Linux Importer Import https://security.archlinux.org/AVG-2879 36.1.3