Description
Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-10-20
Score: 7.8 High
EPSS: n/a
KEV: No
Impact: Local privilege escalation leading to full compromise of Oracle Application Testing Suite
Action: Apply Patch
AI Analysis

Impact

Vulnerability in the OpenScript component of Oracle Application Testing Suite allows a low‑privileged user who can log into the infrastructure to compromise the suite. The flaw enables attackers to gain control of the application, leading to full compromise of confidentiality, integrity and availability of the testing environment.

Affected Systems

Oracle Corporation’s Oracle Application Testing Suite, specifically version 13.3.0.1 of the OpenScript component, is the affected product. Systems running this version on any operating system are vulnerable.

Risk and Exploitability

The CVSS v3.1 score of 7.8 indicates a high severity local threat. No EPSS data is available, and the vulnerability is not listed in CISA KEV. With AV:L, attackers only need local access to the host where the suite runs, making the attack relatively easy once they have a user account. Compromise could allow full control over the application.

Generated by OpenCVE AI on October 21, 2026 at 00:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑issued patch that addresses the OpenScript vulnerability in Oracle Application Testing Suite 13.3.0.1
  • Restrict logon access to the infrastructure where Oracle Application Testing Suite runs to authorized personnel only
  • Monitor the application environment for unusual activity that could indicate exploitation attempts

Generated by OpenCVE AI on October 21, 2026 at 00:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Title Local Privilege Escalation in Oracle Application Testing Suite 13.3.0.1
Weaknesses CWE-284
CWE-732

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
First Time appeared Oracle
Oracle application Testing Suite
CPEs cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle application Testing Suite
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Oracle Application Testing Suite
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-20T21:21:30.190Z

Reserved: 2026-09-28T15:40:09.491Z

Link: CVE-2026-101549

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-20T22:18:04.560

Modified: 2026-10-20T22:18:04.560

Link: CVE-2026-101549

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T00:15:14Z

Weaknesses
  • CWE-284

    Improper Access Control

  • CWE-732

    Incorrect Permission Assignment for Critical Resource