The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server…
Priority LOW 25Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors.
Why it matters now
EPSS 0.01043 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:aix:*:*:*:*:* | 07.00_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:aix:*:*:*:*:* | 07.00_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:hp-ux:*:*:*:*:* | 07.00_i | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:hp-ux:*:*:*:*:* | 07.00_j | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:windows:*:*:*:*:* | 07.00_j | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:windows:*:*:*:*:* | 07.00_l | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:aix:*:*:*:*:* | 07.10_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:aix:*:*:*:*:* | 07.10_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:windows:*:*:*:*:* | 07.10_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:hp-ux:*:*:*:*:* | 07.10_h | Vulnerable | Hitachi |
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_f:*:aix:*:*:*:*:* Versions 07.00_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_g:*:aix:*:*:*:*:* Versions 07.00_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_i:*:hp-ux:*:*:*:*:* Versions 07.00_i Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:hp-ux:*:*:*:*:* Versions 07.00_j Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_j:*:windows:*:*:*:*:* Versions 07.00_j Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.00_l:*:windows:*:*:*:*:* Versions 07.00_l Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_d:*:aix:*:*:*:*:* Versions 07.10_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_e:*:aix:*:*:*:*:* Versions 07.10_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_f:*:windows:*:*:*:*:* Versions 07.10_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:hp-ux:*:*:*:*:* Versions 07.10_h Vulnerable ·Hitachi
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:windows:*:*:*:*:* | 07.10_h | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:hp-ux:*:*:*:*:* | 07.10_i | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:aix:*:*:*:*:* | 07.20_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:aix:*:*:*:*:* | 07.20_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:windows:*:*:*:*:* | 07.20_e | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:hp-ux:*:*:*:*:* | 07.20_f | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:hp-ux:*:*:*:*:* | 07.20_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:windows:*:*:*:*:* | 07.20_g | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:aix:*:*:*:*:* | 07.30_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:windows:*:*:*:*:* | 07.30_b | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:aix:*:*:*:*:* | 07.30_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:hp-ux:*:*:*:*:* | 07.30_c | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:hp-ux:*:*:*:*:* | 07.30_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:windows:*:*:*:*:* | 07.30_d | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:aix:*:*:*:*:* | 07.32 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:hp-ux:*:*:*:*:* | 07.32 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:windows:*:*:*:*:* | 07.32 | Vulnerable | Hitachi |
| cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:windows:*:*:*:*:* | 07.32_a | Vulnerable | Hitachi |
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_h:*:windows:*:*:*:*:* Versions 07.10_h Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.10_i:*:hp-ux:*:*:*:*:* Versions 07.10_i Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_c:*:aix:*:*:*:*:* Versions 07.20_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_d:*:aix:*:*:*:*:* Versions 07.20_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_e:*:windows:*:*:*:*:* Versions 07.20_e Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_f:*:hp-ux:*:*:*:*:* Versions 07.20_f Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:hp-ux:*:*:*:*:* Versions 07.20_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.20_g:*:windows:*:*:*:*:* Versions 07.20_g Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:aix:*:*:*:*:* Versions 07.30_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_b:*:windows:*:*:*:*:* Versions 07.30_b Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:aix:*:*:*:*:* Versions 07.30_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_c:*:hp-ux:*:*:*:*:* Versions 07.30_c Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:hp-ux:*:*:*:*:* Versions 07.30_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.30_d:*:windows:*:*:*:*:* Versions 07.30_d Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:aix:*:*:*:*:* Versions 07.32 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:hp-ux:*:*:*:*:* Versions 07.32 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.32:*:windows:*:*:*:*:* Versions 07.32 Vulnerable ·Hitachi
- cpe:2.3:a:hitachi:groupmax_groupware_server:07.32_a:*:windows:*:*:*:*:* Versions 07.32_a Vulnerable ·Hitachi
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-4123
- 2026-10-03 Alias added: GHSA-4754-4495-xmhp
References
More Hitachi Groupmax Groupware Server vulnerabilities
- TI-2009-03017 Unspecified vulnerability in Hitachi Groupmax Groupware Server 07-00 through 07-50-/A… CVSS 2.0HIGH 7.5
Sources
- CVE-2007-4123 · CVE Program
- CVE-2007-4123 · NVD
- FIRST EPSS
- GHSA-4754-4495-xmhp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences