Get real-time updates on Telegram
CVE-2026-70867: application testing suite 13.3.0.1; +1 more affected products
CVE-2026-70867. CVSS 3.1 base score 7.1 (HIGH, Vendor/CNA). EPSS 0.00334 (percentile 0.25489), scored 21-Oct-2026.
Affected technology
application testing suite · 13.3.0.1
oracle
Oracle Application Testing Suite · 13.3.0.1
Oracle Corporation
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Unauthenticated attacker with access to the physical communication segment attached can the hardware where the Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.
- CWE
- CWE-284
- CCR priority
- 28.5 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N · Vendor/CNA
- EPSS
- 0.00334 · percentile 0.25489 · 2026-10-21
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-22 20:50:20.011821+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-70867.html