CVE-2026-83150

Received Received - Intake

Oracle Application Testing Suite Privilege Escalation

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83150

EUVD

EUVD-2026-79477

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	application_testing_suite	13.3.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Application Testing Suite version 13.3.0.1. It allows an unauthenticated attacker with access to the system where the suite runs to potentially take over the application. Exploitation requires some interaction from a user other than the attacker.

Detection Guidance

Detection of CVE-2026-83150 requires checking for Oracle Application Testing Suite version 13.3.0.1 on systems. Inspect installed software versions using commands like 'rpm -qa | grep oracle_application_testing_suite' on Linux or 'Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -like "*Oracle Application Testing Suite*"}' on Windows. Verify if version 13.3.0.1 is present.

Impact Analysis

If exploited, this vulnerability could lead to complete compromise of Oracle Application Testing Suite. This may result in unauthorized access to sensitive data, disruption of services, or further attacks within the affected infrastructure.

Compliance Impact

The vulnerability allows unauthorized takeover of Oracle Application Testing Suite, which could lead to unauthorized access to sensitive data processed or stored by the suite. This may impact compliance with GDPR (data confidentiality and integrity) and HIPAA (protected health information security) if such data is involved.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Application Testing Suite version 13.3.0.1. Restrict access to the infrastructure where the suite executes to authorized personnel only. Monitor for unusual activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-83150. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70