CVE-2016-8512

CRITICAL

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

Published: Feb 15, 2018 Modified: Jun 17, 2026

CWE-119

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (2)

Vendor	Product	Version
hp	loadrunner	-
hp	performance_center	-

GitHub Security Advisory GHSA-cm3q-5m4g-jqqx

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center...

References (2)

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05354136 Vendor Advisory
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05354136 Vendor Advisory

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 5.54%

Top 8% most likely to be exploited

Threat Score 40.9 / 100

Data Sources

NVD EPSS GitHub