CVE-2016-4361
HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 allow remote attackers to cause a denial of service via unspecified vectors.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 7.61% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- hp/performance center · hp/loadrunner
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/90975
- http://www.securitytracker.com/id/1036006Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05157423Vendor Advisory
- https://www.tenable.com/security/research/tra-2016-26
- http://www.securityfocus.com/bid/90975
- http://www.securitytracker.com/id/1036006Third Party Advisory, VDB Entry
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05157423Vendor Advisory
- https://www.tenable.com/security/research/tra-2016-26
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.