CVE-2025-65116: hitachi job management partner 1/it desktop management - manager Release of Invalid Pointer or Reference
Vulnerability summary
CVE-2025-65116 is a medium (CVSS 5.5) Release of Invalid Pointer or Reference vulnerability in hitachi job management partner 1/it desktop management - manager. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 2.8% of scored vulnerabilities.
Timeline
- 07-04-2026PublishedVulnerability first disclosed.
- 07-04-2026Last modifiedVulnerability information updated.
Description
Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
0.00 pp
From 0.14% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-763Release of Invalid Pointer or ReferenceThe product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Affected systems
Hitachi12 products
- job management partner 1/it desktop management - manager≥ 09-50, ≤ 10-10-16
- job management partner 1/it desktop management 2 - manager≥ 10-50, ≤ 10-50-11
- job_management_partner_1\/it_desktop_management-manager≥ 09-50, ≤ 09-50-03 | ≥ 09-51, ≤ 09-51-05 | ≥ 10-00, ≤ 10-00-02 | ≥ 10-01, ≤ 10-01-05 | ≥ 10-02, ≤ 10-02-05 | ≥ 10-10, ≤ 10-10-16
- job_management_partner_1\/software_distribution_client≥ 09-00, ≤ 09-51-13
- job_management_partner_1\/software_distribution_manager≥ 09-00, ≤ 09-51-13
1 vendor · 12 products