This vulnerability affects Oracle Application Testing Suite version 13.3.0.1 and enables an unauthenticated attacker with network access to exploit it via TCP. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that the attack requires no privileges or user interaction and can result in full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is categorized under CWE-284 (Improper Access Control). The Oracle Critical Patch Update Advisory for July 2026 lists this vulnerability among others but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported as of the advisory date.

An attacker can remotely and without authentication gain control over Oracle Application Testing Suite version 13.3.0.1, potentially leading to full system compromise including unauthorized access to sensitive data, modification or destruction of data, and denial of service. The vulnerability impacts confidentiality, integrity, and availability at a critical level.

Patch status is not yet confirmed — check the Oracle Critical Patch Update Advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and staying on actively supported versions. Until an official patch is confirmed and applied, restrict network access to the Oracle Application Testing Suite to trusted sources only to reduce exposure.