CVE-2013-4697
CVE-2013-4697 is a critical-severity vulnerability in Hitachi Jp1/it Desktop Management-manager with a CVSS 2.0 base score of 9.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 9.0)
- EPSS exploit prediction: 2% (78th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hitachi Jp1/it Desktop Management-manager
- Published:
- Last modified:
Description
Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and 10-01; and Hitachi IT Operations Director 02-50 through 02-50-07, 03-00 through 03-00-12, and 04-00 through 04-00-01 allow remote authenticated users to gain privileges via unknown vectors.
Frequently asked questions
- What is CVE-2013-4697?
- Multiple unspecified vulnerabilities in Hitachi JP1/IT Desktop Management - Manager 09-50 through 09-50-03, 09-51 through 09-51-05, 10-00 through 10-00-02, and 10-01 through 10-01-02; Hitachi Job Management Partner 1/IT Desktop Management - Manager 09-50 through 09-50-03 and 10-01; and Hitachi IT Operations Director 02-50 through 02-50-07, 03-00 through 03-00-12, and 04-00 through 04-00-01 allow remote authenticated users to gain privileges via unknown vectors.
- How severe is CVE-2013-4697?
- CVE-2013-4697 has a CVSS 2.0 base score of 9.0, rated critical severity.
- Is CVE-2013-4697 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (78th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2013-4697?
- CVE-2013-4697 primarily affects Hitachi Jp1/it Desktop Management-manager. In total, 20 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2013-4697?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2013-4697 published?
- CVE-2013-4697 was published on 2013-07-31 and last updated on 2026-06-16.
References
- http://jvn.jp/en/jp/JVN00065218/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000076
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-017/index.html
Affected products (20)
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:09-51:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:09-51-05:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:10-00:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:10-00-02:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:10-01:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:jp1\/it_desktop_management-manager:10-01-02:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:09-50:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:09-50-03:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:job_management_partner_1\/it_desktop_management-manager:10-01:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:02-50:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:02-50-01:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:02-50-06:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:02-50-07:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:03-00:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:03-00-04:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:03-00-07:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:03-00-08:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:03-00-12:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:04-00:*:*:*:*:*:*:*
- cpe:2.3:a:hitachi:it_operations_director:04-00-01:*:*:*:*:*:*:*
More vulnerabilities in Hitachi Jp1/it Desktop Management-manager
- CVE-2021-29644 — High (CVSS 8.1): Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an…
- CVE-2021-29645 — High (CVSS 7.0): Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a…
All CVEs affecting Hitachi Jp1/it Desktop Management-manager →