AT
Product
Application Testing Suite
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 37Medium 19Low 0
Watch
Add Application Testing Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70863 | 8.8 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2019-5064 | 8.8 | Jan 3 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0 Affected: 13.3.0.1 |
| CVE-2019-5063 | 8.8 | Jan 3 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 Affected: 13.3.0.1 |
| CVE-2018-1258 | 8.8 | May 11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security Affected: 10.1; 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 13.3.0.1 |
| CVE-2026-70868 | 8.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36181 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-36189 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35490 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-35491 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-24750 | 8.1 | Sep 17 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to… Affected: 13.3.0.1 |
| CVE-2020-24616 | 8.1 | Aug 25 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka… Affected: 13.3.0.1 |
| CVE-2026-70866 | 7.8 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-70864 | 7.6 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-70865 | 7.5 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2026-35287 | 7.5 | Jul 21 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
| CVE-2020-5398 | 7.5 | Jan 16 | RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application Affected: 13.3.0.1 |
| CVE-2020-2673 | 7.5 | Jan 15 | Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder) Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 13.2.0.1; 13.3.0.1 |
| CVE-2018-15769 | 7.5 | Nov 16 | RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue Affected: 13.3.0.1 |
| CVE-2018-11054 | 7.5 | Aug 31 | RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability Affected: 13.3.0.1 |
| CVE-2018-11040 | 7.5 | Jun 25 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON… Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2018-1272 | 7.5 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests Affected: 12.5.0.3; 13.1.0.1; 13.2.0.1; 13.3.0.1 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 13.3.0.1 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 13.3.0.1 |
| CVE-2019-2727 | 7.3 | Jul 23 | Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Web Apps) Affected: 13.3 |
| CVE-2026-70867 | 7.1 | Aug 18 | Vulnerability in Oracle Application Testing Suite Affected: 13.3.0.1 |
Showing 37