CVE-2026-101548: oracle corporation oracle application testing suite
Vulnerability summary
CVE-2026-101548 is a high (CVSS 7.0) vulnerability in oracle corporation oracle application testing suite.
Timeline
- 20-10-2026PublishedVulnerability first disclosed.
Description
Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Oracle corporation1 product
- oracle application testing suite13.3.0.1
1 vendor · 1 product
References
1 links- www.oracle.com/security-alerts/cpuoct2026.htmlVendor Advisory