CVE-2015-4530: Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administ...

Security readout for executives and security teams

CVE-2015-4530 is a CSRF flaw in several EMC Documentum web applications. If a user is already authenticated, a remote attacker may be able to abuse that user’s session. The issue is notable because it was left by an incomplete fix for an earlier CSRF vulnerability, CVE-2014-2518. Exposure is most likely in organizations still running legacy EMC Documentum web clients, especially administrative or content-management interfaces used by authenticated staff. Internet exposure is not stated in the sources, so confirm deployment visibility rather than assuming it. Treat this as a high-priority legacy platform risk if Documentum is still in use. The business concern is unauthorized use of trusted employee sessions in systems that may manage sensitive enterprise content. If affected products are retired, document that evidence and close the exposure. Mitigation focus: Upgrade affected Documentum components according to EMC advisory ESA-2015-130.; Prioritize WebTop upgrades to 6.8P01 or later where applicable.; Check vendor guidance for fixed versions of each affected WebTop client..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.