Live › vulnerability › CVE-2026-101549
Go to dashboardOracle Application Testing Suite's OpenScript component has a flaw that lets a low-privileged user who can log on to the host take over the suite. The CVSS vector rates it as local access with full confidentiality, integrity and availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle Application Testing Suite 13.3.0.1 (the OpenScript component) on a host where other people or accounts can log on. An attacker needs a low-privileged local account, no user interaction, so it matters most on shared test servers and build or QA machines. Teams that do not run this product, or whose OATS host has no untrusted local logons, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Oracle Application Testing Suite | vendor | 13.3.0.1 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101549")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.