Threats tagged 'ghsa-q9fg-h6w6-m9xr'

A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware running the product to gain unauthorized access to critical data and perform unauthorized data modifications. The CVSS 3.1 base score is 7.1, indicating high severity with impacts on confidentiality and integrity. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.