CVE-2017-8953

MEDIUM

HP LoadRunner and Performance Center < 12.53 - Cross-Site Scripting

Title source: llm

Description

A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038868

Vendor Advisory x_refsource_confirm

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03764en_us

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038867

Scores

CVSS v3 5.4

EPSS 0.0031

EPSS Percentile 54.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

hp/loadrunner < 12.53

hp/performance_center < 12.53

Published Feb 15, 2018

Tracked Since Feb 18, 2026