Medium severity · published Apr 7, 2026
CVE-2025-65116
Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JD
JP1/IT Desktop Management - Manager · Hitachi
09-50 through 10-10-16 · source: vendor
JD
JP1/IT Desktop Management 2 - Manager · Hitachi
13-50 before 13-50-02; 13-11 before 13-11-04; 13-10 before 13-10-07; 13-01 before 13-01-07; 13-00 before 13-00-05; 12-60 before 12-60-12; +1 more · source: vendor
JD
JP1/IT Desktop Management 2 - Operations Director · Hitachi
13-50 before 13-50-02; 13-11 before 13-11-04; 13-10 before 13-10-07; 13-01 before 13-01-07; 13-00 before 13-00-05; 12-60 before 12-60-12; +1 more · source: vendor
JC
JP1/NETM/DM Client · Hitachi
09-00 through 10-20-02 · source: vendor, NVD
JM
JP1/NETM/DM Manager · Hitachi
09-00 through 10-20-02 · source: vendor, NVD
JM
Job Management Partner 1/IT Desktop Management - Manager · Hitachi
09-50 through 10-10-16 · source: vendor
JM
Job Management Partner 1/IT Desktop Management 2 - Manager · Hitachi
10-50 through 10-50-11 · source: vendor
JM
Job Management Partner 1/Software Distribution Client · Hitachi
09-00 through 09-51-13 · source: vendor
JM
Job Management Partner 1/Software Distribution Manager · Hitachi
09-00 through 09-51-13 · source: vendor
JM
Job Management Partner 1/it Desktop Management-manager · Hitachi
09-50 through 09-50-03; 09-51 through 09-51-05; 10-00 through 10-00-02; 10-01 through 10-01-05; 10-02 through 10-02-05; 10-10 through 10-10-16 · source: NVD
JD
Jp1/it Desktop Management 2-manager · Hitachi
10-50 through 10-50-12; 11-00 through 11-00-11; 11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; +9 more · source: NVD
JD
Jp1/it Desktop Management 2-operations Director · Hitachi
10-50 through 10-50-12; 11-00 through 11-00-11; 11-01 through 11-01-12; 11-10 through 11-10-10; 11-50 through 11-50-08; 11-51 through 11-51-10; +9 more · source: NVD
Affected product
JM
Job Management Partner 1/IT Desktop Management - Manager
Hitachi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-65116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-65116
Vendor Advisory
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-118/index.html
More from Job Management Partner 1/IT Desktop Management - Manager
9.8
CVE-2025-65115
Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM
9.8
CVE-2021-29644
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow
7.8
CVE-2021-29645
Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation…
–
CVE-2013-4697
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through…