This vulnerability affects Oracle Agile Product Lifecycle Management for Process version 6.2.4, specifically in the Product Quality Management component. It is exploitable remotely over HTTP by an attacker with low privileges, enabling compromise of the product. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory in July 2026 covering many products, including this one, but no explicit patch availability for this specific vulnerability is detailed in the advisory content provided.

Successful exploitation can lead to complete compromise of Oracle Agile Product Lifecycle Management for Process, affecting confidentiality, integrity, and availability of the system. This could allow attackers to take over the affected product, potentially disrupting business processes and exposing sensitive data.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly once available and staying on actively supported versions. No specific temporary mitigations or workarounds are detailed in the advisory content provided.