Every CVE Search/ Get API key

CVE-2015-4536

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC...

3.5 Low

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Exploit likelihood

1.44%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Record
CVE-2015-4536
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Record
CVE-2015-4536
Updated
2026-11-02
EUVDEUVD-2015-4556 No score

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Record
EUVD-2015-4556
Updated
2026-11-03
GitHub AdvisoriesGHSA-p64h-4gxq-fxff No score

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC...

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Record
GHSA-p64h-4gxq-fxff
Weakness
CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4536 is a low vulnerability (CVSS 3.5) in Emc Documentum Content Server, published August 20, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. No source names a fixed version.

References

MoveEnter Open