Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the vulnerability is in Oracle Application Testing Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L).
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-70867 is a vulnerability in Oracle Application Testing Suite version 13.3.0.1 that allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the suite to compromise it. Successful exploitation can lead to unauthorized access to critical or all accessible data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts. Oracle has published a security advisory but does not explicitly confirm patch availability for this specific vulnerability in the provided content.
CVE-2026-70866 is a vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows a low privileged attacker with the Load Testing for Web Apps privilege and access to the infrastructure where the suite runs to compromise the application. Successful exploitation can lead to full takeover of Oracle Application Testing Suite. The vulnerability has a high severity with a CVSS 3.1 base score of 7.8, impacting confidentiality, integrity, and availability.
CVE-2026-70865 is a high-severity vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows a low privileged attacker with the Load Testing for Web Apps privilege and network access via HTTPS to potentially take over the Oracle Application Testing Suite. The vulnerability is difficult to exploit but can lead to full compromise of confidentiality, integrity, and availability of the affected product.
CVE-2026-70864 is a high-severity vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows a low privileged attacker with the Load Testing for Web Apps privilege and network access via HTTP to compromise the application. Exploitation requires human interaction from a third party. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible by the suite, as well as unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but no explicit patch link for this specific version is provided in the input data.
CVE-2026-70862 is a critical vulnerability in Oracle Application Testing Suite version 13.3.0.1 that allows an unauthenticated attacker with network access via HTTP to compromise the application. Exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by the suite. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without availability impact.
CVE-2026-46924 is a critical vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with network access via TCP to compromise the application. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Successful exploitation can lead to complete takeover of the Oracle Application Testing Suite instance.
CVE-2026-46876 is a critical vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with network access via Oracle Net to compromise the application. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Successful exploitation can lead to full takeover of the Oracle Application Testing Suite instance.
CVE-2026-35290 is a critical vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with network access via TCP to compromise the application, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the issue in their July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for this version. No known exploits are reported in the wild at this time.
CVE-2026-35287 is a high-severity vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with network access via TCP to gain unauthorized access to critical or all accessible data within the application. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated the availability of a patch for this specific version.