{"schema":"threatline.record/2","record":{"id":"CVE-2026-101549","aliases":[],"summary":"Vulnerability in Oracle Application Testing Suite (component: OpenScript).   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with lo","details":"Vulnerability in Oracle Application Testing Suite (component: OpenScript).   The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite.  Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).","categories":["Unclassified"],"product":"Oracle Application Testing Suite","vendor":"Oracle Corporation","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101549","source_modified_at":"2026-10-20T21:21:30.190Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Oracle Application Testing Suite","vendor":"Oracle Corporation","versions":[{"version":"13.3.0.1","status":"affected","versionType":"semver"}],"defaultStatus":null}],"fixed_versions":[],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00152,"percentile":0.03976,"score_date":"2026-10-23"},"published_at":"2026-10-20T21:21:30.190Z","modified_at":"2026-10-20T21:21:30.190Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101549","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-20T21:21:30.190Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101549","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-20T21:21:30.190Z","content_hash":"62b0051c773727e6cf5425b8bc70c03907ece32200be63a3a1f80f45c35cfa67"}}