AT
Product
Application Testing Suite
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 19Low 0
Watch
Add Application Testing Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46924 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-46876 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-35290 | 9.8 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2018-1285 | 9.8 | May 11 | Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files Affected: 13.3.0.1 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 13.3.0.1 |
| CVE-2019-17571 | 9.8 | Dec 20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with… Affected: 13.3.0.1 |
| CVE-2019-2904 | 9.8 | Oct 16 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-11058 | 9.8 | Sep 14 | RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain… Affected: 13.3.0.1 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: 13.3.0.1 |
| CVE-2026-70862 | 9.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
Showing 12