Details of VAR-202604-0223

ID

VAR-202604-0223

CVE

CVE-2025-65116

TITLE

JP1/IT Desktop Management 2, JP1/NETM/DM Multiple vulnerabilities in

Trust: 0.8

sources: JVNDB: JVNDB-2026-010301

DESCRIPTION

Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13. Please check vendor information for potential impact

Trust: 1.62

sources: NVD: CVE-2025-65116 // JVNDB: JVNDB-2026-010301

AFFECTED PRODUCTS

vendor:	日立	model:	job management partner 1/software distribution client	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	job management partner 1/software distribution manager	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	jp1/netm/dm client	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	jp1/it desktop management 2 - manager	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	job management partner 1/it desktop management - manager	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	job management partner 1/it desktop management 2 - manager	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	jp1/it desktop management - manager	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	jp1/it desktop management 2 - operations director	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	jp1/netm/dm manager	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-010301

CVSS

SEVERITY

CVSSV2

CVSSV3

hirt@hitachi.co.jp:	CVE-2025-65116
value:	MEDIUM
Trust: 1.0
OTHER:	JVNDB-2026-010301
value:	MEDIUM
Trust: 0.8

hirt@hitachi.co.jp:	CVE-2025-65116
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-010301
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-010301 // NVD: CVE-2025-65116

PROBLEMTYPE DATA

problemtype:

CWE-763

Trust: 1.0

sources: NVD: CVE-2025-65116

PATCH

title:

hitachi-sec-2026-118

url:

https://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2026-118/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2026-010301

EXTERNAL IDS

db:	NVD	id:	CVE-2025-65116	Trust: 1.8
db:	JVNDB	id:	JVNDB-2026-010301	Trust: 0.8

sources: JVNDB: JVNDB-2026-010301 // NVD: CVE-2025-65116

REFERENCES

url:	https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-118/index.html	Trust: 1.0
url:	https://www.hitachi.com/en/hirt/security/acknowledgments/#ruslan.sayfiev.april.07.2026	Trust: 0.8

sources: JVNDB: JVNDB-2026-010301 // NVD: CVE-2025-65116

SOURCES

db:	JVNDB	id:	JVNDB-2026-010301
db:	NVD	id:	CVE-2025-65116

LAST UPDATE DATE

2026-04-08T23:57:59.708000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-010301	date:	2026-04-08T02:27:00
db:	NVD	id:	CVE-2025-65116	date:	2026-04-07T13:20:11.643

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-010301	date:	2026-04-08T00:00:00
db:	NVD	id:	CVE-2025-65116	date:	2026-04-07T06:16:41.073