This vulnerability affects Oracle Application Testing Suite version 13.3.0.1. An attacker with low privileges, specifically the Load Testing for Web Apps privilege and logon access to the infrastructure hosting the suite, can exploit this flaw to compromise and take over the Oracle Application Testing Suite. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in complete compromise of Oracle Application Testing Suite, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to gain unauthorized control over the application and potentially disrupt its operations.

Oracle has included this vulnerability in its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant security patches promptly. The vendor advisory emphasizes the importance of staying on actively supported versions and applying patches without delay. No specific patch link for this version was provided in the input, so users should consult the Oracle Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions.