Oracle Corporation Oracle Application Testing Suite
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
by severity
3critical22high3medium0low
updated 2026-10-28
01
vulnerabilities (41)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-45447US | — | Exploit |
| CVE-2026-42764US | — | — |
| CVE-2026-14456US | — | — |
| CVE-2026-70689US | critical9.8 | — |
| CVE-2026-46924US | — | — |
| CVE-2026-46876US | — | — |
| CVE-2026-35290US | — | — |
| CVE-2026-83350US | high7.5 | — |
| CVE-2026-83349US | high7.5 | — |
| CVE-2026-83333US | high7.5 | — |
| CVE-2026-71102US | — | — |
| CVE-2026-70863US | high8.8 | — |
| CVE-2026-70688US | high8.8 | — |
| CVE-2026-70862US | critical9.1 | — |
| CVE-2026-70715US | medium6.8 | — |
| CVE-2026-83348US | high8.8 | — |
| CVE-2026-83271US | high8.8 | — |
| CVE-2026-83160US | high8.8 | — |
| CVE-2026-83148US | high8.8 | — |
| CVE-2026-35287US | — | — |
| CVE-2026-71064US | — | — |
| CVE-2026-71063US | — | — |
| CVE-2026-75838US | — | — |
| CVE-2026-70868US | high8.1 | — |
| CVE-2026-83351US | high8.1 | — |
| CVE-2026-83088US | high7.7 | — |
| CVE-2026-83347US | medium6.5 | — |
| CVE-2026-70865US | high7.5 | — |
| CVE-2026-70867US | high7.1 | — |
| CVE-2026-71062US | — | — |
| CVE-2026-83272US | high8.5 | — |
| CVE-2026-83156US | high7.5 | — |
| CVE-2026-71100US | — | — |
| CVE-2026-83149US | critical9.1 | — |
| CVE-2026-70728US | high8.5 | — |
| CVE-2026-70864US | high7.6 | — |
| CVE-2026-70717US | medium6.7 | — |
| CVE-2026-70866US | high7.8 | — |
| CVE-2026-70734US | high7.4 | — |
| CVE-2026-70731US | high8.4 | — |
| CVE-2026-83150US | high7.0 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control27 CVEs
- CWE-269Improper Privilege Management9 CVEs
- CWE-400Uncontrolled Resource Consumption4 CVEs
- CWE-416Use After Free1 CVEs
- CWE-476NULL Pointer Dereference1 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
- CWE-825Expired Pointer Dereference1 CVEs
03
sources (2)
Which sources assert this record, and when.
- NLNCSC-NL (CSAF)37 CVEs
- EUEU Vulnerability Database (ENISA)4 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan