This vulnerability affects Oracle Application Testing Suite version 13.3.0.1 and allows an attacker with limited privileges and network access to compromise the application. The attack requires user interaction from someone other than the attacker and can result in unauthorized access and modification of data within the suite. The vulnerability impacts confidentiality and integrity, with a CVSS 3.1 score of 7.6. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among many others but does not explicitly confirm a patch for this specific version in the provided data.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible by Oracle Application Testing Suite. It also allows unauthorized update, insert, or delete operations on some accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. The attack scope may extend beyond the suite to additional products due to scope change.

Oracle recommends applying security patches promptly as part of their Critical Security Patch Update program. Although the advisory references this vulnerability, no explicit patch link for version 13.3.0.1 is provided in the input data. Customers should consult the Oracle August 2026 Critical Security Patch Update advisory for patch availability and installation instructions. Maintaining actively supported versions and timely patching is strongly advised. Patch status is not yet confirmed for this specific version in the provided data — check the vendor advisory for current remediation guidance.