CVE-2015-4529: Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01,...

Security readout for executives and security teams

This CVE covers an open redirect in several EMC Documentum web products. An attacker could craft a link that appears to use a trusted Documentum site but sends the user to another website, supporting phishing. The sources do not report code execution, data theft by itself, or confirmed active exploitation. Exposure is limited to organizations running the named EMC Documentum web products, especially internet-accessible or broadly accessible portals. Risk increases where users trust Documentum links for authentication or document workflows. Treat this as a phishing-enablement issue, not a direct system takeover based on available sources. Prioritize remediation for internet-facing Documentum systems and environments used for sensitive document workflows. Mitigation focus: Inventory Documentum WebTop, Administrator, DAM, Web Publishers, and Task Space deployments.; Upgrade WebTop to 6.8P02 or later where applicable.; Upgrade Documentum Administrator to 7.2P01 or later where applicable..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.