Every CVE whose affected-product data names Redhat Conga, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (6)
CVE-2011-0720 — CVSS 7.5 (high): Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain…
CVE-2014-3521 — CVSS 5.5 (medium): The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended…
CVE-2007-4136 — CVSS 5.0 (medium): The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly…
CVE-2013-6496 — CVSS 5.0 (medium): Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3)…
CVE-2012-3359 — CVSS 3.7 (low): Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers…
CVE-2013-7347 — CVSS 3.7 (low): Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by…