CVE-2025-27523highCWE-611

CVE-2025-27523: high-severity vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart…

XXE vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager

Published

Follow this CVE+ Monitor JP1/IT Desktop Management 2 - Smart Device Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.4%
XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H
Affected products
Hitachi · JP1/IT Desktop Management 2 - Smart Device Manager
Related CVEs — Hitachi JP1/IT Desktop Management 2 - Smart…

In the same product, most dangerous first.

CVE-2025-27524MEDIUMWeak encryption vulnerability in JP1/IT Desktop Management 2 - Smart Device ManagerEPSS 0.2%CVE-2025-27525LOWInformation Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device ManagerEPSS 0.1%