This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1 and allows an attacker with low privileges and logon access to the infrastructure to compromise the product by unauthorized modification (update, insert, delete) of accessible data and to cause a partial denial of service. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but low integrity and availability impacts. The vendor advisory does not explicitly mention a patch or remediation for this specific vulnerability but strongly recommends applying available security patches as part of the July 2026 Critical Patch Update. No known exploits are reported in the wild.

Successful exploitation can lead to unauthorized modification of some accessible data within Oracle Agile Engineering Data Management and cause a partial denial of service, impacting data integrity and availability. Confidentiality is not affected. The attack requires local access with low privileges and does not require user interaction.

The vendor advisory does not explicitly confirm a patch or remediation level for this vulnerability. Oracle recommends that customers remain on actively-supported versions and apply security patches without delay, as part of their Critical Patch Update process. Users of Oracle Agile Engineering Data Management version 6.2.1 should monitor Oracle's security alerts and apply any relevant patches from the July 2026 Critical Patch Update or subsequent advisories. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.