CVE-2015-4533: EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2...

Security readout for executives and security teams

CVE-2015-4533 affects EMC Documentum Content Server. An authenticated remote user could exploit an authorization check flaw after object creation to run arbitrary code with super-user privileges. For organizations using Documentum for regulated or sensitive content, this could mean full compromise of the repository service. Exposure is limited to organizations running affected EMC Documentum Content Server patch levels. Risk is highest where many users, integrations, or service accounts can authenticate to Documentum, because the flaw requires authenticated access but can escalate to super-user code execution. Treat as high priority for any active Documentum deployment, especially where it stores sensitive business records. The flaw requires authentication, but the potential result is super-user code execution on a core content platform. Mitigation focus: Upgrade to the fixed Content Server patch level for the deployed branch.; Review EMC advisory ESA-2015-131 for branch-specific remediation guidance.; Restrict Documentum authentication to trusted users and service accounts while patching..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.