CVE-2015-4544: Emc Documentum Content Server

High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days.

EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to obtain superuser privileges via crafted object operations. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4626.

Affected products

• Emc Documentum Content Server: version 7.1 only; version 7.2 only

Published 2015-09-04. Last modified 2026-06-17.