Threats affecting pkg:maven/com.oracle.application.testing/suite

A critical vulnerability (CVE-2026-83149) exists in Oracle Application Testing Suite version 13.3.0.1. It allows a low-privileged attacker with Test Manager for Web Apps privilege and network access via HTTP to gain unauthorized access to critical data, perform unauthorized data modifications, and cause partial denial of service. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.