CVE-2017-5789: HP Loadrunner

Critical severity, CVSS 9.8. EPSS: 17.9% chance of exploitation in the next 30 days.

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

Affected products

• HP Loadrunner: up to and including 12.53
• HP Performance Center: up to and including 12.53

Published 2017-10-11. Last modified 2026-06-17.