CVE-2015-6857: HP Loadrunner

High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138.

Affected products

• HP Loadrunner: version 11.52 only; version 12.00 only; version 12.01 only; version 12.02 only; version 12.50 only
• HP Performance Center: version 11.52 only; version 12.00 only; version 12.01 only; version 12.20 only; version 12.50 only

Published 2015-11-26. Last modified 2026-06-17.