This vulnerability exists in the OpenScript component of Oracle Application Testing Suite. A low‑privileged user who has logged into the same infrastructure that hosts the suite can exploit the flaw to take full control of the application testing environment. Successful exploitation results in the attacker completely compromising the suite, potentially gaining confidentiality, integrity, and availability impact on all data and services handled by the application testing tool.

The affected product is Oracle Application Testing Suite, version 13.3.0.1, specifically the OpenScript component. The vendor is Oracle Corporation.

The CVSS 3.1 base score of 7.0 indicates a moderate to high risk with full confidentiality, integrity, and availability impacts. The EPSS score is currently unavailable, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires a local, low‑privileged user who already has access to the infrastructure where the suite runs, implying that protection of the underlying hosts and strict local access controls are critical to mitigate this risk.