Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM

8.8 CVSS

Vulnerability Description

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-65115

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Ruslan Sayfiev
Denis Faiustov

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-118/index.html

More from Hitachi

View All →

CVE-2025-9661

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

High 8.1

CVE-2025-7737

DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform

High 8.6

CVE-2025-7386

Information exposure vulnerability in Hitachi Storage Navigator

Medium 6.8

CVE-2025-66445

Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

High 7.1

CVE-2025-66444

Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

High 8.2

Affected Vendor

Hitachi

View all reports →

Affected Software

JP1/IT Desktop Management 2 - Manager, JP1/IT Desktop Management 2 - Operations Director, Job Management Partner 1/IT Desktop Management 2 - Manager, JP1/IT Desktop Management - Manager, Job Management Partner 1/IT Desktop Management - Manager, JP1/NETM/DM Manager, JP1/NETM/DM Client, Job Management Partner 1/Software Distribution Manager, Job Management Partner 1/Software Distribution Client

Vulnerable Versions:

13-50, 13-11, 13-10, 13-01, 13-00, 12-60, 10-50, 09-50, 09-00