Riskcovery

CVE-2025-65115

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

State
Published
Severity
8.8 High
Published
Apr 7, 2026
Updated
Apr 7, 2026
Reserved
Nov 18, 2025

Read the record on cve.org

Description

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HHitachi

Weaknesses

  • CWE-73 External control of file name or path

Affected Products

ProductVersions
JP1/IT Desktop Management 2 - ManagerHitachi
  • 13-50 to before 13-50-02Affectedfrom 13-50-02Not affected
  • 13-11 to before 13-11-04Affectedfrom 13-11-04Not affected
  • 13-10 to before 13-10-07Affectedfrom 13-10-07Not affected
  • 13-01 to before 13-01-07Affectedfrom 13-01-07Not affected
  • 13-00 to before 13-00-05Affectedfrom 13-00-05Not affected
  • 12-60 to before 12-60-12Affectedfrom 12-60-12Not affected
  • 10-50 through 12-50-11Affected
JP1/IT Desktop Management 2 - Operations DirectorHitachi
  • 13-50 to before 13-50-02Affectedfrom 13-50-02Not affected
  • 13-11 to before 13-11-04Affectedfrom 13-11-04Not affected
  • 13-10 to before 13-10-07Affectedfrom 13-10-07Not affected
  • 13-01 to before 13-01-07Affectedfrom 13-01-07Not affected
  • 13-00 to before 13-00-05Affectedfrom 13-00-05Not affected
  • 12-60 to before 12-60-12Affectedfrom 12-60-12Not affected
  • 10-50 through 12-50-11Affected
Job Management Partner 1/IT Desktop Management 2 - ManagerHitachi
  • 10-50 through 10-50-11Affected
JP1/IT Desktop Management - ManagerHitachi
  • 09-50 through 10-10-16Affected
Job Management Partner 1/IT Desktop Management - ManagerHitachi
  • 09-50 through 10-10-16Affected
JP1/NETM/DM ManagerHitachi
  • 09-00 through 10-20-02Affectedfrom 10-30Not affected
JP1/NETM/DM ClientHitachi
  • 09-00 through 10-20-02Affectedfrom 10-30Not affected
Job Management Partner 1/Software Distribution ManagerHitachi
  • 09-00 through 09-51-13Affected
Job Management Partner 1/Software Distribution ClientHitachi
  • 09-00 through 09-51-13Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.