CVE-2017-5585: OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database i...

Security readout for executives and security teams

This flaw affects OpenText Documentum Content Server 7.3 in a specific PostgreSQL configuration. An authenticated remote user could abuse DQL handling to run database modification or schema commands. That creates material risk to stored content integrity and repository operations, but the provided sources do not show active exploitation. Exposure appears limited to OpenText Documentum Content Server 7.3 deployments using PostgreSQL with return_top_results_row_based set to false. The attacker must already authenticate remotely, so internet exposure matters less than account compromise, weak access control, or broad internal user access. Treat this as a high-priority integrity risk if Documentum 7.3 with PostgreSQL is present. The main business concern is unauthorized alteration of repository data or database structure by an authenticated user. Mitigation focus: Identify any Documentum Content Server 7.3 instances using PostgreSQL.; Avoid the vulnerable false configuration where operationally supported.; Check OpenText guidance for fixed builds or supported configuration changes..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.