CVE-2015-2121: HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to r...

Security readout for executives and security teams

This CVE describes a remote file-read flaw in HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52. An attacker could read files from an affected system through crafted URL input. Business risk depends on whether this legacy testing infrastructure remains deployed and reachable. Exposure is likely limited to organizations still running the named HP Network Virtualization versions, especially if management or application interfaces are reachable beyond trusted testing networks. Prioritize if the named HP testing tools are still deployed or exposed. The practical risk is data disclosure from systems that may hold credentials, test data, or configuration files. Mitigation focus: Inventory LoadRunner and Performance Center Network Virtualization deployments.; Check HP advisory SSRT101932 for supported fixes or workarounds.; Restrict access to affected interfaces to trusted administrative networks..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.