{
  "port": 10002,
  "protocol": "both",
  "service": "documentum",
  "oneLiner": "Registered to the EMC (now OpenText) Documentum Content Server; rare on a scan.",
  "whatItIs": "IANA assigns 10002 on TCP and UDP to \"EMC-Documentum Content Server Product\", registered by Documentum's engineering. The port most Documentum deployments actually depend on is 1489 (dmdocbroker, the connection broker), so 10002 is a secondary registration you seldom meet. Nmap sees it open on about 0.04% of hosts, and there is no way to tell from the number whether a real Content Server or an unrelated application is behind it.",
  "exposure": {
    "verdict": "careful",
    "note": "An enterprise content repository plane belongs on an internal network. Identify the listener first; a Documentum tier should not be reachable from the internet."
  },
  "checkCommand": "nmap -sV -p 10002 TARGET",
  "links": [
    {
      "title": "IANA port registry — 10002 (documentum)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=10002",
      "kind": "iana"
    },
    {
      "title": "nmap-services — Nmap's port frequency database",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}