This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1. It allows an attacker with low privileges and network access via TCP to cause the application to hang or repeatedly crash, resulting in a complete denial of service. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no impact on confidentiality or integrity, and high impact on availability. The vendor advisory references the July 2026 Critical Patch Update but does not explicitly confirm a patch for this specific vulnerability.

Successful exploitation results in unauthorized ability to cause the Oracle Agile Engineering Data Management application to hang or crash repeatedly, leading to a complete denial of service. There is no impact on confidentiality or integrity of data. The disruption affects availability of the service.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly. Until a patch is confirmed and applied, consider limiting network access to the affected service to trusted sources to reduce exposure.