AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 35/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 3 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
ContentKeeper, founded in Australia in 1998 and later acquired by Impero Software, provides web security for Web 2.0 and mobile-centric environments using behavioral analysis and SSL packet inspection.
Known CVEs (3)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utili…
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files …
ContentKeeper provides web security for Web 2.0 and mobile-centric environments using behavioral analysis and SSL packet inspection, offering a hybrid web filter that combines cloud and inline protection across managed and guest devices, with features such as OCR‑based safeguarding, encrypted‑traffic visibility, real‑time policy control, and proxy detection to keep students safe wherever they learn.
Strengths
Hybrid web filtering combining cloud and inline protection
Complete device coverage across Chromebooks, Windows, macOS, iPads and BYOD
SSL inspection visibility into encrypted web traffic
Real‑time control and reporting of policy changes
Proxy detection and blocking with risk scoring
OCR‑based safeguarding to flag concerning text
News about ContentKeeper (1)Where this comes fromItems from ContentKeeper's own public feeds — changelog, blog, GitHub releases or status page — that name ContentKeeper in the headline or summary. News from ContentKeeper that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI.
