[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxTHhiQAM5vFtTe10ZAu2Fchx9OOmLJJ6Ef8zF4rkmAo":3,"g5a-ex:redhat\u002Fconga@*":88,"g5a-family:redhat\u002Fconga":90},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":65,"seoMetadata":66,"meta":85},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"redhat","conga",2,7,0,"2014-10-06",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"0.10.0",1,false,{"version":19,"cve_count":9,"kev_count":11,"has_kev":17},"0.12.2","Conga by Redhat is a technology product with 2 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":9,"kev_count":11,"has_kev":17},[25,33,40,45,50,55,62],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2011-0720","Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.","2011-02-03",7.5,"v2","High",0.03198,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":30,"severity":38,"isKev":17,"epssScore":39},"CVE-2010-3852","The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses \"[INSERT SECRET HERE]\" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie.","2010-11-06",6.4,"Medium",0.02002,{"cveId":41,"description":42,"publishedDate":12,"cvssScore":43,"cvssVersion":30,"severity":38,"isKev":17,"epssScore":44},"CVE-2013-6496","Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3) storage, (4) portal_skins\u002Fcustom, or (5) logs Luci extension.",5,0.01779,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":43,"cvssVersion":30,"severity":38,"isKev":17,"epssScore":49},"CVE-2007-4136","The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.","2007-11-14",0.01745,{"cveId":51,"description":52,"publishedDate":12,"cvssScore":53,"cvssVersion":30,"severity":38,"isKev":17,"epssScore":54},"CVE-2014-3521","The component in (1) \u002Fluci\u002Fhomebase and (2) \u002Fluci\u002Fcluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.",5.5,0.01428,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":30,"severity":60,"isKev":17,"epssScore":61},"CVE-2012-3359","Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie.  NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7347 for the incorrect enforcement of a user timeout.","2014-03-31",3.7,"Low",0.00337,{"cveId":63,"description":64,"publishedDate":58,"cvssScore":59,"cvssVersion":30,"severity":60,"isKev":17,"epssScore":61},"CVE-2013-7347","Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie.  NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user and password in a cookie.",[],{"title":67,"metaDescription":68,"keywords":69,"structuredData":70},"Conga by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Conga by Redhat covering 2 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Conga vulnerabilities, Conga security, Conga CVE, Redhat Conga, Conga threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":71,"@type":72,"name":73,"description":68,"url":74,"manufacturer":75,"applicationCategory":79,"softwareVersion":80,"mainEntity":81},"https:\u002F\u002Fschema.org","SoftwareApplication","Conga","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fconga",{"@type":76,"name":77,"url":78},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","2 versions tracked",{"@type":82,"name":83,"description":84,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Conga Security Vulnerabilities","Security vulnerabilities affecting Conga by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":86,"apiVersion":87},"2026-10-18T22:27:53.281Z","3.0",{"rows":89,"total":11,"capped":17,"failed":11},[],[]]