U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): loadrunner
  • Search Type: Search All
  • CPE Name Search: false
There are 31 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2017-8953

A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found.

Published: February 15, 2018; 5:29:08 PM -0500 		V3.0: 5.4 MEDIUM
 V2.0: 3.5 LOW
CVE-2016-8512

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

Published: February 15, 2018; 5:29:00 PM -0500 		V3.0: 9.8 CRITICAL
 V2.0: 7.5 HIGH
CVE-2017-5789

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

Published: October 11, 2017; 5:29:00 PM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 7.5 HIGH
CVE-2016-4384

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors.

Published: September 20, 2016; 10:59:11 PM -0400 		V3.0: 8.6 HIGH
 V2.0: 9.0 HIGH
CVE-2016-4361

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allow remote attackers to cause a denial of service via unspecified vectors.

Published: June 08, 2016; 10:59:46 AM -0400 		V3.0: 7.5 HIGH
 V2.0: 5.0 MEDIUM
CVE-2016-4360

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 do not restrict file paths sent to an unlink call, which allows remote attackers to delete arbitrary files via the path parameter to data/import_csv, aka ZDI-CAN-3555.

Published: June 08, 2016; 10:59:42 AM -0400 		V3.0: 9.1 CRITICAL
 V2.0: 6.4 MEDIUM
CVE-2016-4359

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allows remote attackers to execute arbitrary code via a long -server_name value, aka ZDI-CAN-3516.

Published: June 08, 2016; 10:59:37 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 7.5 HIGH
CVE-2015-6857

Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138.

Published: November 25, 2015; 10:59:02 PM -0500 		V3.x:(not available)
 V2.0: 7.2 HIGH
CVE-2015-5426

Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756.

Published: September 15, 2015; 10:00:07 PM -0400 		V3.x:(not available)
 V2.0: 4.6 MEDIUM
CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.

Published: May 25, 2015; 1:59:02 PM -0400 		V3.x:(not available)
 V2.0: 7.8 HIGH
CVE-2015-2110

Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.

Published: May 25, 2015; 1:59:00 PM -0400 		V3.x:(not available)
 V2.0: 10.0 HIGH
CVE-2013-6213

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833.

Published: April 19, 2014; 12:49:24 AM -0400 		V3.x:(not available)
 V2.0: 10.0 HIGH
CVE-2013-4839

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851.

Published: November 04, 2013; 11:55:04 AM -0500 		V3.x:(not available)
 V2.0: 7.5 HIGH
CVE-2013-4838

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1850.

Published: November 04, 2013; 11:55:04 AM -0500 		V3.x:(not available)
 V2.0: 10.0 HIGH
CVE-2013-4837

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.

Published: November 04, 2013; 11:55:04 AM -0500 		V3.x:(not available)
 V2.0: 10.0 HIGH
CVE-2013-4801

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736.

Published: July 29, 2013; 9:59:14 AM -0400 		V3.x:(not available)
 V2.0: 7.5 HIGH
CVE-2013-4800

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.

Published: July 29, 2013; 9:59:14 AM -0400 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2013-4799

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734.

Published: July 29, 2013; 9:59:14 AM -0400 		V3.x:(not available)
 V2.0: 7.6 HIGH
CVE-2013-4798

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.

Published: July 29, 2013; 9:59:14 AM -0400 		V3.x:(not available)
 V2.0: 10.0 HIGH
CVE-2013-4797

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690.

Published: July 29, 2013; 9:59:14 AM -0400 		V3.x:(not available)
 V2.0: 7.5 HIGH