CVE-2024-4188: Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.

Severity: high (CVSS 7.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-30 · updated 2026-06-17
Weakness: CWE-523

Description

Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from 16.7 through 23.4.

Affected products

OpenText Documentum Content Server: from 16.7 through 23.4

References

https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0815868
https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0815868

Get alerted when CVE-2024-4188 or the next vulnerability affects your stack