CVE-2026-83149

CriticalCVSS 9.1

Published: 15/09/2026(UTC)Updated: 21/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Vulnerability in Oracle Application Testing Suite version 13.3.0.1. A low privileged attacker with Test Manager for Web Apps privilege and network access via HTTP can access and modify critical data and cause a partial denial of service (partial DoS), and the attack may impact additional products (scope change).

Risk Assessment

A low privileged attacker can access and modify critical data and partially disrupt system operation, potentially affecting related products as well.

Recommendation

Apply Oracle updates for Oracle Application Testing Suite and review Test Manager for Web Apps user privileges, restricting network access to the necessary minimum.

Other vulnerabilities in Oracle Application Testing Suite

See all

Original NVD description (English source)

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the vulnerability is in Oracle Application Testing Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS