CVE-2012-0396: EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE per...

Security readout for executives and security teams

This flaw could let a logged-in EMC Documentum xPlore user learn whether restricted objects exist and read their metadata through search. It is not described as full document-content access, but metadata and object existence can still expose sensitive business, legal, or customer information. Exposure is most likely in organizations still running legacy EMC Documentum xPlore versions with searchable repositories and broad authenticated user populations. External-facing access raises concern, but the provided sources require authentication. Treat this as a moderate priority where Documentum contains sensitive records or many internal users have search access. It is lower urgency than remote code execution, but legacy unpatched systems can leak valuable metadata. Mitigation focus: Inventory EMC Documentum xPlore deployments and versions.; Confirm whether 1.0, 1.1 before P07, or 1.2 is present.; Apply EMC vendor guidance from ESA-2012-010 or supported replacement versions..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.