This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1 and allows an attacker with low privileges and network access via TCP to cause the application to hang or crash repeatedly, resulting in a complete denial of service. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vendor advisory references Oracle's July 2026 Critical Patch Update but does not explicitly confirm a patch for this specific vulnerability. Customers are urged to stay on supported versions and apply patches promptly.

Successful exploitation results in a denial of service condition by causing the Oracle Agile Engineering Data Management application to hang or crash repeatedly. There is no impact on confidentiality or integrity. The availability impact is rated high, which can disrupt business operations relying on this product.

The vendor advisory does not explicitly confirm a patch or workaround for this vulnerability. Oracle's Critical Patch Update for July 2026 includes numerous security patches, and customers are strongly advised to apply all relevant patches without delay. Patch status for this specific vulnerability is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest remediation guidance. Maintaining supported versions and timely patching is the recommended mitigation.