Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority HIGH 82

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01944 Published 2025-08-30 Fixed in 125.10 CWE-434
Priority HIGH 77

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01155 Published 2025-08-20 Fixed in 125.10 CWE-552