CVE-2017-5586: OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary comman...

Security readout for executives and security teams

CVE-2017-5586 is a remote command execution issue in OpenText Documentum D2 4.x, formerly EMC Documentum D2. An attacker may be able to run operating system commands through malicious serialized Java data. This is serious for any exposed D2 deployment, but the provided sources do not identify exact fixed versions or active exploitation. Exposure is likely limited to organizations running OpenText or EMC Documentum D2 4.x. Risk is higher where D2 services are reachable from untrusted networks or integrated into sensitive document workflows. Treat this as a high-priority legacy enterprise application risk. Remote command execution against document management systems can threaten sensitive records and business operations, but remediation planning needs vendor guidance because the provided sources do not name a patch. Mitigation focus: Inventory all Documentum D2 deployments and confirm whether any are version 4.x.; Check OpenText vendor guidance for fixed versions or supported remediation steps.; Restrict network access to D2 services from untrusted networks..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.