AT
Product
Application Testing Suite
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 19Low 0
Watch
Add Application Testing Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 13.3.0.1 |
| CVE-2026-46924 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-46876 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-35290 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2018-1285 | 9.8 | May 11 | Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files Affected: 13.3.0.1 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 13.3.0.1 |
| CVE-2019-17571 | 9.8 | Dec 20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with… Affected: 13.3.0.1 |
| CVE-2019-2904 | 9.8 | Oct 16 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-11058 | 9.8 | Sep 14 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain… Affected: 13.3.0.1 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: 13.3.0.1 |
| CVE-2026-70862 | 9.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-70863 | 8.8 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2019-5064 | 8.8 | Jan 3 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0 Affected: 13.3.0.1 |
| CVE-2019-5063 | 8.8 | Jan 3 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 Affected: 13.3.0.1 |
| CVE-2018-1258 | 8.8 | May 11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security Affected: 10.1; 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 13.3.0.1 |
| CVE-2026-70868 | 8.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36181 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36189 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35490 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35491 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-24750 | 8.1 | Sep 17 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-24616 | 8.1 | Aug 25 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka… Affected: 13.3.0.1 |
| CVE-2026-70866 | 7.8 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-70864 | 7.6 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-70865 | 7.5 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-35287 | 7.5 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2020-5398 | 7.5 | Jan 16 | RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application Affected: 13.3.0.1 |
| CVE-2020-2673 | 7.5 | Jan 15 | Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 13.2.0.1; 13.3.0.1 |
| CVE-2018-15769 | 7.5 | Nov 16 | RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue Affected: 13.3.0.1 |
| CVE-2018-11054 | 7.5 | Aug 31 | RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability Affected: 13.3.0.1 |
| CVE-2018-11040 | 7.5 | Jun 25 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-1272 | 7.5 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 13.3.0.1 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 13.3.0.1 |
| CVE-2019-2727 | 7.3 | Jul 23 | Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps) Affected: 13.3 |
| CVE-2026-70867 | 7.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |