Threat Intelligence Database

A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This flaw allows a low-privileged attacker with login access to the infrastructure to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity with significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, providing patches to address it.

A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows a low-privileged attacker with access to the physical communication segment of the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Agile Engineering Data Management. The CVSS 3.1 base score is 7.3, indicating a high severity with significant confidentiality and integrity impacts.

CVE-2026-71053 is a high-severity vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows an unauthenticated attacker with network access via HTTP to potentially take over the affected system. The vulnerability affects the Web Services Security component and has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-71052 is a high-severity vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability affects the Web Services Security component and has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory, recommending patch application. No direct exploit in the wild is reported yet.

CVE-2026-70712 is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1 that allows a high privileged attacker with logon access to the infrastructure to compromise the product. Exploitation is difficult and requires high privileges. Successful exploitation can lead to full takeover of Oracle Agile Engineering Data Management. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity with impacts on confidentiality, integrity, and availability.

CVE-2026-70703 is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1 that allows a low privileged attacker with network access via HTTP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data within Oracle Agile Engineering Data Management. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. The vulnerability is difficult to exploit and requires high attack complexity but does not require user interaction. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, recommending customers apply patches promptly.

CVE-2026-70698 is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1 that allows a high privileged attacker with logon access to the infrastructure to compromise the product. Successful exploitation can lead to full takeover of Oracle Agile Engineering Data Management. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability.

CVE-2026-70697 is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows a low privileged attacker with logon access to the infrastructure where the product runs to potentially compromise and take over the application. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-70693 is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows a high privileged attacker with logon access to the infrastructure to potentially compromise the product. Exploitation is difficult and requires human interaction from a user other than the attacker. Successful exploitation can lead to full takeover of Oracle Agile Engineering Data Management. The CVSS 3.1 base score is 6.3, indicating a medium severity with high impact on confidentiality, integrity, and availability.

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).