CVE-2026-35290

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in Oracle Application Testing Suite (version 13.3.0.1) allows an unauthenticated attacker to remotely compromise the system via TCP. CVSS score is 9.8.

Risk Assessment

An attacker can fully take over Oracle Application Testing Suite, leading to loss of confidentiality, integrity, and availability of data.

Recommendation

Apply the Oracle update for version 13.3.0.1.

Original NVD description (English source)

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).