PatchTheCVECVE-2025-65115: Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Manage
43
This month
HIGH 8.8UPGRADEUPGRADEUPGRADE
CVE-2025-65115 is a high-severity flaw (CVSS 8.8) affecting job management partner 1\/it desktop management-manager, jp1\/it desktop management 2-manager, jp1\/it desktop management 2-operations director. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution M
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.6% (top 51%) |
| CISA exploited list | No |
| Weakness | CWE-73 |
| Published | 2026-04-07 |
| Last modified | 2026-06-17 |
Publisher (CNA): Hitachi, Ltd. · Vendor: hitachi
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
hitachi job management partner 1\/it desktop management-manager UPGRADE
Affected: >= 09-50 and <= 09-50-03 · >= 09-51 and <= 09-51-05 · >= 10-00 and <= 10-00-02 · >= 10-01 and <= 10-01-05 · >= 10-02 and <= 10-02-05 · >= 10-10 and <= 10-10-16
Fixed in: newer than 10-10-16
Safe to downgrade to: a release before 09-50
1. Check installed version
apt-cache policy job-management-partner-1it-desktop-management-manager || rpm -q job-management-partner-1it-desktop-management-manager || job-management-partner-1it-desktop-management-manager --version
2. UPGRADE to newer than 10-10-16 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade job-management-partner-1it-desktop-management-manager
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade job-management-partner-1it-desktop-management-manager
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 09-50 (Debian / Ubuntu)
apt-cache madison job-management-partner-1it-desktop-management-manager
sudo apt install job-management-partner-1it-desktop-management-manager=<VERSION_BEFORE_09-50>
sudo apt-mark hold job-management-partner-1it-desktop-management-manager
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list job-management-partner-1it-desktop-management-manager
sudo dnf downgrade job-management-partner-1it-desktop-management-manager-<VERSION_BEFORE_09-50>
sudo dnf versionlock add job-management-partner-1it-desktop-management-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
hitachi jp1\/it desktop management 2-manager UPGRADE
Affected: >= 10-50 and <= 10-50-12 · >= 11-00 and <= 11-00-11 · >= 11-01 and <= 11-01-12 · >= 11-10 and <= 11-10-10 · >= 11-50 and <= 11-50-08 · >= 11-51 and <= 11-51-10 · >= 12-00 and <= 12-00-09 · >= 12-10 and <= 12-10-12
Fixed in: newer than 13-50-01
Safe to downgrade to: a release before 10-50
1. Check installed version
apt-cache policy jp1it-desktop-management-2-manager || rpm -q jp1it-desktop-management-2-manager || jp1it-desktop-management-2-manager --version
2. UPGRADE to newer than 13-50-01 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade jp1it-desktop-management-2-manager
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade jp1it-desktop-management-2-manager
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 10-50 (Debian / Ubuntu)
apt-cache madison jp1it-desktop-management-2-manager
sudo apt install jp1it-desktop-management-2-manager=<VERSION_BEFORE_10-50>
sudo apt-mark hold jp1it-desktop-management-2-manager
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list jp1it-desktop-management-2-manager
sudo dnf downgrade jp1it-desktop-management-2-manager-<VERSION_BEFORE_10-50>
sudo dnf versionlock add jp1it-desktop-management-2-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
hitachi jp1\/it desktop management 2-operations director UPGRADE
Affected: >= 10-50 and <= 10-50-12 · >= 11-00 and <= 11-00-11 · >= 11-01 and <= 11-01-12 · >= 11-10 and <= 11-10-10 · >= 11-50 and <= 11-50-08 · >= 11-51 and <= 11-51-10 · >= 12-00 and <= 12-00-09 · >= 12-10 and <= 12-10-12
Fixed in: newer than 13-50-01
Safe to downgrade to: a release before 10-50
1. Check installed version
apt-cache policy jp1it-desktop-management-2-operations-director || rpm -q jp1it-desktop-management-2-operations-director || jp1it-desktop-management-2-operations-director --version
2. UPGRADE to newer than 13-50-01 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade jp1it-desktop-management-2-operations-director
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade jp1it-desktop-management-2-operations-director
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 10-50 (Debian / Ubuntu)
apt-cache madison jp1it-desktop-management-2-operations-director
sudo apt install jp1it-desktop-management-2-operations-director=<VERSION_BEFORE_10-50>
sudo apt-mark hold jp1it-desktop-management-2-operations-director
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list jp1it-desktop-management-2-operations-director
sudo dnf downgrade jp1it-desktop-management-2-operations-director-<VERSION_BEFORE_10-50>
sudo dnf versionlock add jp1it-desktop-management-2-operations-director
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
hitachi jp1\/netm\/dm manager UPGRADE
Affected: >= 09-00 and <= 09-00-14 · >= 09-01 and <= 09-01-14 · >= 09-10 and <= 09-10-15 · >= 09-12 and <= 09-12-16 · >= 09-50 and <= 09-50-20 · >= 09-51 and <= 09-51-14 · >= 10-10 and <= 10-10-25 · >= 10-20 and <= 10-20-02
Fixed in: newer than 10-20-02
Safe to downgrade to: a release before 09-00
1. Check installed version
apt-cache policy jp1netmdm-manager || rpm -q jp1netmdm-manager || jp1netmdm-manager --version
2. UPGRADE to newer than 10-20-02 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade jp1netmdm-manager
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade jp1netmdm-manager
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 09-00 (Debian / Ubuntu)
apt-cache madison jp1netmdm-manager
sudo apt install jp1netmdm-manager=<VERSION_BEFORE_09-00>
sudo apt-mark hold jp1netmdm-manager
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list jp1netmdm-manager
sudo dnf downgrade jp1netmdm-manager-<VERSION_BEFORE_09-00>
sudo dnf versionlock add jp1netmdm-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
hitachi jp1\/netm\/dm client UPGRADE
Affected: >= 09-00 and <= 09-00-14 · >= 09-01 and <= 09-01-14 · >= 09-10 and <= 09-10-15 · >= 09-12 and <= 09-12-16 · >= 09-50 and <= 09-50-20 · >= 09-51 and <= 09-51-14 · >= 10-10 and <= 10-10-25 · >= 10-20 and <= 10-20-02
Fixed in: newer than 10-20-02
Safe to downgrade to: a release before 09-00
1. Check installed version
apt-cache policy jp1netmdm-client || rpm -q jp1netmdm-client || jp1netmdm-client --version
2. UPGRADE to newer than 10-20-02 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade jp1netmdm-client
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade jp1netmdm-client
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 09-00 (Debian / Ubuntu)
apt-cache madison jp1netmdm-client
sudo apt install jp1netmdm-client=<VERSION_BEFORE_09-00>
sudo apt-mark hold jp1netmdm-client
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list jp1netmdm-client
sudo dnf downgrade jp1netmdm-client-<VERSION_BEFORE_09-00>
sudo dnf versionlock add jp1netmdm-client
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-65115?
job management partner 1\/it desktop management-manager: upgrade to newer than 10-10-16; jp1\/it desktop management 2-manager: upgrade to newer than 13-50-01; jp1\/it desktop management 2-operations director: upgrade to newer than 13-50-01. Exact commands for each OS are on this page.
Is CVE-2025-65115 being exploited?
CVE-2025-65115 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-65115 affect?
CVE-2025-65115 affects job management partner 1\/it desktop management-manager, jp1\/it desktop management 2-manager, jp1\/it desktop management 2-operations director. Severity is high (CVSS 8.8). Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Man
How urgent is CVE-2025-65115?
Priority 43/100. High severity
Software pages
Related CVEs
- CVE-2025-65116 MEDIUM 5.5 UPGRADE UPGRADE Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2