CVE-2026-101549: High severity Oracle Application Testing Suite vulnerability
Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs a low-privileged account and the ability to log on to the infrastructure where Oracle Application Testing Suite is running. The attack is local and does not require user interaction.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of Oracle Application Testing Suite, with high impact to confidentiality, integrity, and availability.
Which version is identified as affected?
The affected supported version identified is Oracle Application Testing Suite 13.3.0.1, specifically the OpenScript component.