CVE-2026-35287Patch(oracle / application_testing_suite)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch oracle application_testing_suite systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • application_testing_suite

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
application_testing_suite

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-30: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-07-30: 107-30
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-35287 CVSS 7.5 - Oracle Application Testing Suite 13[.]3[.]0[.]1 Unauthenticated attackers can gain unauthorized access to critical data via network. No user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/OU4Dxk65SW

    Post summary

    The tweet announces a high‑severity vulnerability (CVE‑2026‑35287) affecting Oracle Application Testing Suite, warns of unauthenticated data access via the network, and urges immediate patching, with no evidence of active exploitation or PoC.

    0000041
    98 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporacleapplication_testing_suite13.3.0.1--

Explore more