This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1. It allows a low privileged attacker who has logon access to the infrastructure where the product runs to compromise the system, resulting in a partial denial of service. Successful exploitation requires user interaction from a person other than the attacker. The CVSS vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) reflects that the attack vector is local, with low complexity, requiring low privileges and user interaction, impacting only availability. No confidentiality or integrity impacts are reported. The vendor advisory does not explicitly confirm patch availability or remediation status for this specific vulnerability in the provided content.

The vulnerability can lead to unauthorized partial denial of service of Oracle Agile Engineering Data Management, potentially disrupting availability of the service. There is no impact on confidentiality or integrity. Exploitation requires local access with low privileges and user interaction, limiting the scope and ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly. Until a patch is applied, limit logon access to trusted users and educate users to avoid interaction with suspicious prompts or content that could trigger the vulnerability.