CVE-2026-70863: High severity Oracle Oracle Application Testing Suite vulnerability

Published Aug 18, 2026

Updated

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Oracle Application Testing Suite=13.3.0.1

Oracle Application Testing Suite=13.3.0.1

Event History

Aug 18, 2026

CVE Published

via MITRE·09:02 PM

Data Sourced

via MITRE·09:02 PM

DescriptionSeverity

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs network access to the affected Oracle Application Testing Suite instance over HTTPS and must already hold the Load Testing for Web Apps privilege. No user interaction is required.

Which deployments are known to be affected?

The affected supported version is Oracle Application Testing Suite 13.3.0.1. The provided information does not identify whether any particular configuration enables or prevents exposure.

What is the potential impact of successful exploitation?

Successful exploitation can result in takeover of Oracle Application Testing Suite, with high impacts to confidentiality, integrity, and availability.