CVE-2025-65116

Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

MEDIUM
5.5
CVSS Score
Published: April 7, 2026 at 05:43 AM UTC
Updated: June 17, 2026 at 09:55 AM UTC
9 products affected across 1 vendorJob Management Partner 1/IT Desktop Management - ManagerJP1/NETM/DM ManagerJP1/IT Desktop Management 2 - Manager

Using JP1/IT Desktop Management 2 - Manager by Hitachi?

Get instant alerts when new vulnerabilities affect JP1/IT Desktop Management 2 - Manager - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

09-50 ≤ v ≤ 09-50-0309-51 ≤ v ≤ 09-51-0510-00 ≤ v ≤ 10-00-0210-01 ≤ v ≤ 10-01-0510-02 ≤ v ≤ 10-02-0510-10 ≤ v ≤ 10-10-169-50 ≤ v ≤ 10-10-169-50
microsoft-windows (environment)
10-50 ≤ v ≤ 10-50-1210-50 ≤ v ≤ 12-50-1111-00 ≤ v ≤ 11-00-1111-01 ≤ v ≤ 11-01-1211-10 ≤ v ≤ 11-10-1011-50 ≤ v ≤ 11-50-0811-51 ≤ v ≤ 11-51-1012-00 ≤ v ≤ 12-00-0912-10 ≤ v ≤ 12-10-1212-50 ≤ v ≤ 12-50-1112-60 ≤ v ≤ 12-60-1112-60 ≤ v < 12-60-1213-0 ≤ v < 13-00-0513-00 ≤ v ≤ 13-00-0413-01 ≤ v ≤ 13-01-0613-1 ≤ v < 13-01-0713-10 ≤ v ≤ 13-10-0613-10 ≤ v < 13-10-0713-11 ≤ v ≤ 13-11-0313-11 ≤ v < 13-11-0413-50 ≤ v ≤ 13-50-0113-50 ≤ v < 13-50-0210-5012-6013-013-113-1013-1113-50
Affected range stops below 12-60-12, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-00-05, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-01-07, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-10-07, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-11-04, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-50-02, so it looks safe — our inference, not a vendor statement
microsoft-windows (environment)
10-50 ≤ v ≤ 10-50-1210-50 ≤ v ≤ 12-50-1111-00 ≤ v ≤ 11-00-1111-01 ≤ v ≤ 11-01-1211-10 ≤ v ≤ 11-10-1011-50 ≤ v ≤ 11-50-0811-51 ≤ v ≤ 11-51-1012-00 ≤ v ≤ 12-00-0912-10 ≤ v ≤ 12-10-1212-50 ≤ v ≤ 12-50-1112-60 ≤ v ≤ 12-60-1112-60 ≤ v < 12-60-1213-0 ≤ v < 13-00-0513-00 ≤ v ≤ 13-00-0413-01 ≤ v ≤ 13-01-0613-1 ≤ v < 13-01-0713-10 ≤ v ≤ 13-10-0613-10 ≤ v < 13-10-0713-11 ≤ v ≤ 13-11-0313-11 ≤ v < 13-11-0413-50 ≤ v ≤ 13-50-0113-50 ≤ v < 13-50-0210-5012-6013-013-113-1013-1113-50
Affected range stops below 12-60-12, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-00-05, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-01-07, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-10-07, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-11-04, so it looks safe — our inference, not a vendor statement
Affected range stops below 13-50-02, so it looks safe — our inference, not a vendor statement
microsoft-windows (environment)
09-00 ≤ v ≤ 09-00-1409-01 ≤ v ≤ 09-01-1409-10 ≤ v ≤ 09-10-1509-12 ≤ v ≤ 09-12-1609-50 ≤ v ≤ 09-50-2009-51 ≤ v ≤ 09-51-1410-10 ≤ v ≤ 10-10-2510-20 ≤ v ≤ 10-20-029-0 ≤ v ≤ 10-20-029-0
microsoft-windows (environment)
09-00 ≤ v ≤ 09-00-1409-01 ≤ v ≤ 09-01-1409-10 ≤ v ≤ 09-10-1509-12 ≤ v ≤ 09-12-1609-50 ≤ v ≤ 09-50-2009-51 ≤ v ≤ 09-51-1410-10 ≤ v ≤ 10-10-2510-20 ≤ v ≤ 10-20-029-0 ≤ v ≤ 10-20-029-0
microsoft-windows (environment)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMHitachi
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-763CWE-120

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card