---
id: CVE-2026-83150
title: Vulnerability in Oracle Application Testing Suite
summary: >-
  Vulnerability in Oracle Application Testing Suite.   The supported version
  that is affected is 13.3.0.1. Difficult to exploit vulnerability allows
  unauthenticated attacker with logon to the infrastructure where Oracle
  Application Testing…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-269
vendor: Oracle Corporation
product: Oracle Application Testing Suite
affected:
  - oracle_application_testing_suite 13.3.0.1
published: '2026-09-15'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T14:17:34.647'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-83150'
references:
  - url: 'https://www.oracle.com/security-alerts/cspusep2026.html'
    label: secalert_us@oracle.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-17T13:02:09.677381Z'
epss: 0.0013
epssPercentile: 0.02183
ingestedAt: '2026-09-15T20:44:02.469Z'
---

## Overview

Vulnerability in Oracle Application Testing Suite.   The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.