{"schemaVersion":3,"id":"CVE-2026-83150","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).","dates":{"published":"2026-09-15T20:03:37.951Z","modified":"2026-09-17T13:10:43.476Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7,"severity":"high","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0013,"percentile":0.02395,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.022999999999999996,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00107},"history":[{"date":"2026-09-16T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00113,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0013,"percentile":0.02395}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00107,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0013,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0013,"percentile":0.02395}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-269","name":"Improper Privilege Management","description":"The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/269.html"}],"affected":[{"vendor":"oracle corporation","product":"oracle application testing suite","name":"Oracle Application Testing Suite","label":"oracle application testing suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"13.3.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"13.3.0.1","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_application_testing_suite"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.oracle.com/security-alerts/cspusep2026.html","label":"www.oracle.com/security-alerts/cspusep2026.html","hostname":"www.oracle.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-15T20:03:37.951Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-17T13:10:43.476Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T11:21:55.295Z","stale":false,"partial":false}}