Threats affecting pkg:maven/com.oracle.agile/engineering-data-management

A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.4, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.

A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware running the product to gain unauthorized access to critical data and perform unauthorized data modifications. The CVSS 3.1 base score is 7.1, indicating high severity with impacts on confidentiality and integrity. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.