Read the docs
TI-2007-02915 Aliases CVE-2007-3011GHSA-cgqf-q6r9-fgph

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView…

Priority MEDIUM 40Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote attackers to execute arbitrary commands via shell metacharacters in the Servername subparameter of the ParameterList parameter.

Why it matters now

EPSS 0.04165 90th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:fujitsu:serverview:2.50:*:*:*:*:*:*:*2.50VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:3.60l98:*:*:*:*:*:*:*3.60l98VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:3.60l99:*:*:*:*:*:*:*3.60l99VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.10l11:*:*:*:*:*:*:*4.10l11VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.11l11b:*:*:*:*:*:*:*4.11l11bVulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.11l81:*:*:*:*:*:*:*4.11l81VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.1:*:*:*:*:*:*:*4.30.1VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.2:*:*:*:*:*:*:*4.30.2VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.3:*:*:*:*:*:*:*4.30.3VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.4:*:*:*:*:*:*:*4.30.4VulnerableFujitsu
  • cpe:2.3:a:fujitsu:serverview:2.50:*:*:*:*:*:*:* Versions 2.50 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:3.60l98:*:*:*:*:*:*:* Versions 3.60l98 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:3.60l99:*:*:*:*:*:*:* Versions 3.60l99 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.10l11:*:*:*:*:*:*:* Versions 4.10l11 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.11l11b:*:*:*:*:*:*:* Versions 4.11l11b Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.11l81:*:*:*:*:*:*:* Versions 4.11l81 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.1:*:*:*:*:*:*:* Versions 4.30.1 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.2:*:*:*:*:*:*:* Versions 4.30.2 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.3:*:*:*:*:*:*:* Versions 4.30.3 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.4:*:*:*:*:*:*:* Versions 4.30.4 Vulnerable ·Fujitsu
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:fujitsu:serverview:4.30.5:*:*:*:*:*:*:*4.30.5VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.6:*:*:*:*:*:*:*4.30.6VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.7:*:*:*:*:*:*:*4.30.7VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.8:*:*:*:*:*:*:*4.30.8VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.9:*:*:*:*:*:*:*4.30.9VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.10:*:*:*:*:*:*:*4.30.10VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.11:*:*:*:*:*:*:*4.30.11VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.12:*:*:*:*:*:*:*4.30.12VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.30.13:*:*:*:*:*:*:*4.30.13VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.1:*:*:*:*:*:*:*4.40.1VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.2:*:*:*:*:*:*:*4.40.2VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.3:*:*:*:*:*:*:*4.40.3VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.4:*:*:*:*:*:*:*4.40.4VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.5:*:*:*:*:*:*:*4.40.5VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.40.6:*:*:*:*:*:*:*4.40.6VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.1:*:*:*:*:*:*:*4.50.1VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.2:*:*:*:*:*:*:*4.50.2VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.3:*:*:*:*:*:*:*4.50.3VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.4:*:*:*:*:*:*:*4.50.4VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.5:*:*:*:*:*:*:*4.50.5VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.6:*:*:*:*:*:*:*4.50.6VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.7:*:*:*:*:*:*:*4.50.7VulnerableFujitsu
cpe:2.3:a:fujitsu:serverview:4.50.8:*:*:*:*:*:*:*4.50.8VulnerableFujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.5:*:*:*:*:*:*:* Versions 4.30.5 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.6:*:*:*:*:*:*:* Versions 4.30.6 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.7:*:*:*:*:*:*:* Versions 4.30.7 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.8:*:*:*:*:*:*:* Versions 4.30.8 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.9:*:*:*:*:*:*:* Versions 4.30.9 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.10:*:*:*:*:*:*:* Versions 4.30.10 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.11:*:*:*:*:*:*:* Versions 4.30.11 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.12:*:*:*:*:*:*:* Versions 4.30.12 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.30.13:*:*:*:*:*:*:* Versions 4.30.13 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.1:*:*:*:*:*:*:* Versions 4.40.1 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.2:*:*:*:*:*:*:* Versions 4.40.2 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.3:*:*:*:*:*:*:* Versions 4.40.3 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.4:*:*:*:*:*:*:* Versions 4.40.4 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.5:*:*:*:*:*:*:* Versions 4.40.5 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.40.6:*:*:*:*:*:*:* Versions 4.40.6 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.1:*:*:*:*:*:*:* Versions 4.50.1 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.2:*:*:*:*:*:*:* Versions 4.50.2 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.3:*:*:*:*:*:*:* Versions 4.50.3 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.4:*:*:*:*:*:*:* Versions 4.50.4 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.5:*:*:*:*:*:*:* Versions 4.50.5 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.6:*:*:*:*:*:*:* Versions 4.50.6 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.7:*:*:*:*:*:*:* Versions 4.50.7 Vulnerable ·Fujitsu
  • cpe:2.3:a:fujitsu:serverview:4.50.8:*:*:*:*:*:*:* Versions 4.50.8 Vulnerable ·Fujitsu

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-3011
  2. 2026-10-03 Alias added: GHSA-cgqf-q6r9-fgph

References

Exploit 1

Advisory 1

Other 2

  • TI-2008-02989 Multiple stack-based buffer overflows in the ServerView web interface… CVSS 2.0MEDIUM 6.5
  • TI-2006-03470 Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up… CVSS 2.0MEDIUM 5.0
  • TI-2006-03471 Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences