CVE-2025-27523CWE-611

XXE vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager

High · published May 15, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-05-15T06:22Z
EPSS history
Timeline
  • 15 MAY 06:22Z
    XXE vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager
    cvelistv5