CVE-2026-83148
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Vulnerability in Oracle Application Testing Suite affecting version 13.3.0.1. A low-privileged attacker with Test Manager for Web Apps privilege and network access via HTTP can take over Oracle Application Testing Suite.
Risk Assessment
Takeover of Oracle Application Testing Suite can breach confidentiality, integrity, and availability of the testing environment. Network access and Test Manager for Web Apps privilege are required.
Recommendation
Apply Oracle patches for version 13.3.0.1 and restrict Test Manager for Web Apps privilege to necessary accounts. Monitor network access via HTTP.
Other vulnerabilities in Oracle Application Testing Suite
See all- CVE-2026-101549High
Vulnerability in Oracle Application Testing Suite (component: OpenScript) affects version 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8.
- CVE-2026-101548High
Vulnerability in Oracle Application Testing Suite (component: OpenScript) affects version 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0.
- CVE-2026-83149Critical
Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low privileged attacker with Test Manager for Web Apps privilege and network access via HTTP can access and modify critical data and cause a partial denial of service (partial DoS), and the attack may impact additional products (scope change).
- CVE-2026-70862Critical
Vulnerability in Oracle Application Testing Suite. Affected version is 13.3.0.1. An unauthenticated attacker can remotely access and modify data via HTTP.
- CVE-2026-46924Critical
Vulnerability in Oracle Application Testing Suite (version 13.3.0.1) allows an unauthenticated attacker via TCP to fully compromise the system.
- CVE-2026-46876Critical
Vulnerability in Oracle Application Testing Suite (version 13.3.0.1) allows an unauthenticated attacker to remotely compromise the system via Oracle Net. CVSS score is 9.8.
- CVE-2026-35290Critical
Vulnerability in Oracle Application Testing Suite (version 13.3.0.1) allows an unauthenticated attacker to remotely compromise the system via TCP. CVSS score is 9.8.
- CVE-2026-83150High
Vulnerability in Oracle Application Testing Suite affecting version 13.3.0.1. An unauthenticated attacker with local logon can exploit it if another person performs a specific action, leading to takeover of Oracle Application Testing Suite.
- CVE-2026-70868High
Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.
- CVE-2026-70867High
Vulnerability in Oracle Application Testing Suite version 13.3.0.1. An unauthenticated attacker with access to the physical communication segment can compromise the system. Successful attacks may result in unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data.
Original NVD description (English source)
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS