The Oracle Application Testing Suite (OpenScript component) contains a flaw that allows a local, low‑privileged user to compromise the suite by exploiting a privilege and access control weakness (CWE‑269). The vulnerability permits takeover of the testing environment, impacting confidentiality, integrity, and availability as indicated by the CVSS score of 7.8. No external network access is required beyond local host access.

Oracle Corporation’s Oracle Application Testing Suite OpenScript component version 13.3.0.1. All installations of this version are vulnerable.

The CVSS v3.1 base score of 7.8 signals high severity, while the EPSS score of less than 1% indicates a very low probability of exploitation currently. This weakness is a privilege and access control issue (CWE‑269) that can be leveraged once an attacker has local logon, low attack complexity, and no user interaction, making exploitation straightforward for a low‑privileged user. The vulnerability is not listed in CISA KEV, and no active exploitation reports exist at present.