This vulnerability affects Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker who has logon access to the underlying infrastructure to compromise the application. Exploitation requires human interaction from a third party, making it difficult to exploit. The impact includes potential full takeover of the Oracle Application Testing Suite, affecting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 that includes a fix for this vulnerability as part of a broader set of patches.

Successful exploitation can result in complete compromise of Oracle Application Testing Suite, impacting confidentiality, integrity, and availability of the system. However, exploitation is difficult and requires human interaction from a person other than the attacker. There are no known exploits in the wild at this time.

Oracle has released a security patch for this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply this patch promptly to mitigate the risk. Oracle recommends remaining on actively supported versions and applying security patches without delay. No additional mitigations are specified beyond applying the official patch.