CVE-2014-2514: EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 do...

Security readout for executives and security teams

CVE-2014-2514 lets a logged-in remote user gain super-user level capability in EMC Documentum Content Server and potentially execute arbitrary code. The sources do not show active exploitation, but the business impact is serious where Documentum stores sensitive enterprise content. Exposure is most likely in organizations still running the named EMC Documentum Content Server versions, especially where authenticated user access is broad or available through remote access paths. The source bundle does not identify affected CPEs, deployment defaults, or unauthenticated exposure. Treat as high priority for any remaining legacy Documentum estate. The issue can turn ordinary authenticated access into super-user execution capability, which threatens confidential content and server integrity. Urgency depends on whether affected versions remain deployed and who can authenticate to them. Mitigation focus: Inventory EMC Documentum Content Server instances and map versions to the affected release ranges.; Upgrade to 6.7 SP1 P28, 6.7 SP2 P15, 7.0 P15, 7.1 P06, or later.; Restrict Documentum access to trusted networks and required users while remediation is pending..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.