Loadrunner
Vendor:
First CVE: Dec 27, 2007 · Active for 18 years
28
Total CVEs
More Total CVEs than 96% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
8.4
Avg CVSS
Higher Avg CVSS than 74% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Loadrunner over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 27, 2007
18 years ago
Most Recent CVE
Feb 15, 2018
3,081 days ago
CVE Severity & Scoring
Loadrunner28 CVEs
14%
71%
14%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (25.0%)
Unknown21 (75.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (25.0%)
High0 (0.0%)
Unknown21 (75.0%)
User Interaction
None6 (21.4%)
Unknown21 (75.0%)
Required1 (3.6%)
Privileges Required
Low1 (3.6%)
High0 (0.0%)
None6 (21.4%)
Unknown21 (75.0%)
Top CVEs
Signals from CVEs in this product scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-1549HIGH Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code via unknown vectors. | May 7, 2010 | 10.0 | 85 | NO | YES |
CVE-2013-4798HIGH Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705. | Jul 29, 2013 | 10.0 | 79 | NO | YES |
CVE-2013-4837HIGH Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832. | Nov 4, 2013 | 10.0 | 77 | NO | YES |
CVE-2013-2370HIGH Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671. | Jul 29, 2013 | 7.5 | 71 | NO | YES |
CVE-2009-3693HIGH Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \.. (backwards s | Oct 13, 2009 | 9.3 | 66 | NO | YES |
CVE-2013-4800HIGH Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735. | Jul 29, 2013 | 9.3 | 63 | NO | YES |
CVE-2007-6530HIGH Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual | Dec 27, 2007 | 9.3 | 62 | NO | YES |
CVE-2017-5789CRITICAL HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner | Oct 11, 2017 | 9.8 | 39 | NO | NO |
CVE-2016-4359CRITICAL Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 throug | Jun 8, 2016 | 9.8 | 36 | NO | NO |
CVE-2013-6213HIGH Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833. | Apr 19, 2014 | 10.0 | 36 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (28 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
7 CVEs
25.0% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
7 CVEs
25.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (28 CVEs).
Media Mentions
Signals from CVEs in this product scope (28 CVEs).
Top CNAs Publishing CVEs For Loadrunner
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.52 | 12 | 8.3 | 24.9% | 0 | 4 |
| 9.51 | 11 | 8.1 | 25.9% | 0 | 4 |
| 9.50.0 | 11 | 8.1 | 25.9% | 0 | 4 |
| 9.5 | 1 | 9.3 | 41.6% | 0 | 1 |
| 9.0.0 | 11 | 8.1 | 25.9% | 0 | 4 |
| 9.0 | 2 | 8.8 | 40.6% | 0 | 1 |
| 8.14 | 2 | 8.8 | 40.6% | 0 | 1 |
| 8.13 | 2 | 8.8 | 40.6% | 0 | 1 |
| 8.12 | 2 | 8.8 | 40.6% | 0 | 1 |
| 8.0 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.8 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.6 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.51 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.5 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.02 | 2 | 8.8 | 40.6% | 0 | 1 |
| 7.0 | 2 | 8.8 | 40.6% | 0 | 1 |
| 12.50 | 4 | 8.4 | 8.9% | 0 | 0 |
| 12.02 | 4 | 8.4 | 8.9% | 0 | 0 |
| 12.01 | 4 | 8.4 | 8.9% | 0 | 0 |
| 12.00 | 4 | 8.4 | 8.9% | 0 | 0 |