CVE-2014-4629: EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated u...

Security readout for executives and security teams

CVE-2014-4629 affects EMC Documentum Content Server and lets a remote authenticated user read or delete arbitrary files through an insecure direct object reference. For executives, the concern is unauthorized access or destruction of repository-adjacent files by someone who already has credentials or can obtain them. Exposure is most likely in legacy EMC Documentum deployments still running 7.0, 7.1 before P10, or 6.7 before SP2 P19. Risk increases where broad user access, weak account hygiene, or externally reachable authenticated portals exist. Prioritize remediation for any still-supported Documentum environment because the impact includes file disclosure and deletion. The issue is old, but legacy enterprise content systems often retain sensitive records, making unpatched systems a meaningful governance and availability risk. Mitigation focus: Identify all EMC Documentum Content Server versions in production and recovery environments.; Upgrade 7.1 deployments to P10 or later where applicable.; Upgrade 6.7 deployments to SP2 P19 or later where applicable..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.