Hewlett Packard Enterprise

Records2515All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical598CVSS 9.0–10.0

CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability CRITICAL 97KEV 2022-05-25 TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CRITICAL 100KEV 2022-04-13 TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2012-01607 PHP-CGI Query String Parameter Vulnerability CRITICAL 100KEV 2022-03-25 TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

28 records in Loadrunner · all components

TI-2010-01497 CVE-2010-1549 · GHSA-xqh3-mrp7-2g29

Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance…

HIGH 82

Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.77647 Published 2010-05-07 No fix listed

TI-2013-04208 CVE-2013-4798 · GHSA-j3w7-32p3-pr7w

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

HIGH 79

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.66967 Published 2013-07-26 No fix listed

TI-2013-04245 CVE-2013-4837 · GHSA-4529-7wqq-6324

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows…

HIGH 78

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.62617 Published 2013-11-04 No fix listed

TI-2013-02117 CVE-2013-2370 · GHSA-mx7x-r3cf-xwwh

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

HIGH 68

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.61915 Published 2013-07-26 No fix listed

TI-2009-03517 CVE-2009-3693 · GHSA-r6hj-55cr-38hq

Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx)…

HIGH 68

Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via \..

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.4158 Published 2009-10-13 No fix listed CWE-22

TI-2013-04210 CVE-2013-4800 · GHSA-fqq3-cc27-4322

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

HIGH 67

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39303 Published 2013-07-26 No fix listed

TI-2007-06227 CVE-2007-6530 · GHSA-jh8v-3fp9-w3r3

Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1…

HIGH 66

Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execu…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.36833 Published 2007-12-27 No fix listed CWE-119

TI-2017-03727 CVE-2017-5789 · GHSA-4282-67jc-f356

Memory corruption in HPE LoadRunner and Performance Center

MEDIUM 59

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.17864 Published 2017-10-13 No fix listed CWE-119

TI-2016-03741 CVE-2016-4359 · GHSA-3mxj-4pp4-c6m4

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through…

MEDIUM 58

Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1577 Published 2016-06-08 No fix listed CWE-119

TI-2011-00255 CVE-2011-0272 · GHSA-95cx-gjq8-8gp7

Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute…

MEDIUM 58

Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002, related to the HttpTunnel feature.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13442 Published 2011-01-18 No fix listed

TI-2015-01894 CVE-2015-2110 · GHSA-j55p-3g5x-5262

Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.

MEDIUM 56

Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10995 Published 2015-05-25 No fix listed CWE-119

TI-2013-05226 CVE-2013-6213 · GHSA-7g7f-8hx9-p7g5

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1…

MEDIUM 56

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10719 Published 2014-04-19 No fix listed

TI-2013-04246 CVE-2013-4838 · GHSA-7r7m-5qmf-2775

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows…

MEDIUM 56

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1850.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10719 Published 2013-11-04 No fix listed

TI-2016-07010 CVE-2016-8512 · GHSA-cm3q-5m4g-jqqx

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

MEDIUM 50

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05541 Published 2018-02-15 No fix listed CWE-119

TI-2016-03742 CVE-2016-4360 · GHSA-3fhg-h6jr-rg4q

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE…

MEDIUM 50

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.08566 Published 2016-06-08 No fix listed

TI-2013-04211 CVE-2013-4801 · GHSA-gr4m-4v8m-834r

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

MEDIUM 44

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08129 Published 2013-07-26 No fix listed

TI-2013-04209 CVE-2013-4799 · GHSA-5mgg-g5pc-wc75

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

MEDIUM 44

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.08249 Published 2013-07-26 No fix listed

TI-2016-03766 CVE-2016-4384 · GHSA-5r5q-g76c-pvm6

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to…

MEDIUM 43

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.03565 Published 2016-09-21 No fix listed

TI-2016-03743 CVE-2016-4361 · GHSA-7mgv-2hpg-78mr

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02…

MEDIUM 43

HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patc…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07613 Published 2016-06-08 No fix listed

TI-2013-04207 CVE-2013-4797 · GHSA-9vc6-cv7m-9vwm

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

MEDIUM 42

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06279 Published 2013-07-26 No fix listed

TI-2013-02116 CVE-2013-2369 · GHSA-86hx-58v5-vx6m

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to…

MEDIUM 41

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05536 Published 2013-07-26 No fix listed

TI-2013-04247 CVE-2013-4839 · GHSA-4gpr-g68j-fw9j

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows…

MEDIUM 40

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04002 Published 2013-11-04 No fix listed

TI-2011-02035 CVE-2011-2328 · GHSA-7q3x-3jfm-2xh2

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service…

LOW 39

Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05905 Published 2011-06-02 No fix listed CWE-119

TI-2015-05753 CVE-2015-6857 · GHSA-p6cv-jp39-h62r

Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00…

LOW 38

Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0375 Published 2015-11-26 No fix listed

TI-2010-03816 CVE-2010-4028 · GHSA-5vjx-p3qh-qqqc

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier…

LOW 37

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02265 Published 2010-10-28 No fix listed

Open these records in search →

Critical	598
High	951
Medium	866
Low	100
No CVSS	0