CVE-2026-70863

Analyzed Analyzed - Analysis Complete

Oracle Application Testing Suite Privilege Escalation

Publication date: 2026-08-18

Last updated on: 2026-08-27

Assigner: Oracle

Description

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-27

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-06

NVD

CVE-2026-70863

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	application_testing_suite	13.3.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows a low-privileged attacker with network access via HTTPS to take over the system by exploiting a flaw in the Load Testing for Web Apps feature.

Detection Guidance

Detection of CVE-2026-70863 requires checking for Oracle Application Testing Suite version 13.3.0.1. Use commands like 'rpm -qa | grep oracle_application_testing_suite' on Linux or check installed programs via Control Panel on Windows. Verify network access to HTTPS ports used by the suite.

Impact Analysis

An attacker could gain full control of the Oracle Application Testing Suite, leading to potential data breaches, unauthorized system access, or disruption of testing services. This could affect confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability allows unauthorized takeover of Oracle Application Testing Suite, which could lead to unauthorized access to sensitive data. This may impact compliance with GDPR, HIPAA, and other regulations by potentially exposing confidential information, violating data integrity, or disrupting availability of critical systems.

Mitigation Strategies

Apply the latest security patches from Oracle for version 13.3.0.1 of Application Testing Suite. Restrict network access to the Oracle Application Testing Suite to trusted users and systems only. Review and reduce privileges for users with Load Testing for Web Apps role to minimum necessary.

Hi! I’m here to help you understand CVE-2026-70863. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70