CVE-2026-70867: High severity Oracle Oracle Application Testing Suite vulnerability
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can realistically exploit this vulnerability?
An unauthenticated attacker must have access to the physical communication segment attached to the hardware running Oracle Application Testing Suite. It is not described as exploitable by an attacker who lacks that adjacent network access.
What access does an attacker need before exploitation?
No Oracle Application Testing Suite privileges or user interaction are required. The attacker needs adjacent-network access to the physical communication segment connected to the host.
Which deployments are identified as affected?
The affected supported version identified is Oracle Application Testing Suite 13.3.0.1. The provided information does not state whether other versions or default configurations are affected.
What could a successful attack allow?
A successful attack can expose critical data or all data accessible to Oracle Application Testing Suite. It can also permit unauthorized update, insert, or delete operations on some accessible data.