This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1 and allows a low privileged attacker with network access via HTTP to cause a hang or repeated crash, resulting in a complete denial of service. The CVSS 3.1 base score is 5.3, reflecting a medium severity with an impact on availability only. The attack complexity is high, requiring specific conditions, and no user interaction is needed. The vulnerability does not impact confidentiality or integrity. Oracle's July 2026 Critical Patch Update advisory lists many patches but does not explicitly confirm a patch for this vulnerability, and no remediation level is specified.

Successful exploitation results in denial of service by causing the Oracle Agile Engineering Data Management application to hang or crash repeatedly. This impacts availability but does not compromise confidentiality or integrity of the system. The vulnerability requires network access via HTTP and low privileges, with high attack complexity.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory for current remediation guidance. Oracle strongly recommends applying security patches promptly when available. Until a patch is confirmed, monitor for updates from Oracle and consider limiting network access to the affected service if feasible.