conga vulnerabilities (Red Hat)

16 vulnerabilities.

• conga Red Hat Plone contains Cross-site Request Forgery CVE-2012-5500 Fix available 4.3 MediumNovember 3, 2014
• conga Red Hat The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows... CVE-2014-3521 5.5 MediumOctober 6, 2014
• conga Red Hat Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted... CVE-2013-6496 5.0 MediumOctober 6, 2014
• conga Red Hat Plone is vulnerable to denial of service CVE-2012-5499 Fix available 5.0 MediumSeptember 30, 2014
• conga Red Hat Plone denial of service via Caching Bypass CVE-2012-5498 Fix available 5.0 MediumSeptember 30, 2014
• conga Red Hat Plone User account enumeration via crafted URL CVE-2012-5497 Fix available 5.0 MediumSeptember 30, 2014
• conga Red Hat Plone Code Injection vulnerability CVE-2012-5488 Fix available 5.0 MediumSeptember 30, 2014
• conga Red Hat HTTP header injection in Plone and Zope2 CVE-2012-5486 Fix available 6.4 MediumSeptember 30, 2014
• conga Red Hat Plone Code Injection vulnerability CVE-2012-5485 Fix available 6.8 MediumSeptember 30, 2014
• conga Red Hat Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the... CVE-2012-3359 Fix available 3.7 LowMarch 30, 2014
• conga Red Hat Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool CVE-2011-1948 Fix available 4.3 MediumJune 6, 2011
• conga Red Hat Plone Privilege Escalation Vulnerability CVE-2011-0720 Fix available 7.5 HighFebruary 3, 2011
• conga Red Hat Moderate severity vulnerability that affects Zope2 CVE-2010-1104 Fix available 4.3 MediumMarch 25, 2010
• conga Red Hat The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service ... CVE-2007-4136 Fix available 5.0 MediumNovember 14, 2007
• conga Red Hat Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to... CVE-2007-0240 Fix available 4.3 MediumMarch 22, 2007
• conga Red Hat The luci server component in conga preserves the password between page loads for the Add System... CVE-2007-1462 4.3 MediumMarch 15, 2007