CVE-2026-101741
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application can lead to unauthorized access to critical data or complete access to all data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Risk Assessment
An attacker with access to the local network segment can gain access to critical data, potentially leading to serious information disclosure. The risk affects environments where the network segment is not properly isolated.
Recommendation
Update Oracle Agile Engineering Data Management to a version containing the fix and restrict access to the network segment where the application runs.
Other vulnerabilities in Oracle Agile Engineering Data Management
See all- CVE-2016-5518High
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
- CVE-2026-61186Critical
Vulnerability in Oracle Agile Engineering Data Management (Install component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data. It may also cause a hang or frequent crash (DOS).
- CVE-2016-3468Critical
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
- CVE-2026-101746High
Vulnerability in Oracle Agile Engineering Data Management (component Install) affecting version 6.2.1. An easily exploitable attack by an unauthenticated attacker with access to the physical communication segment requires user interaction and can lead to unauthorized creation, deletion or modification and access to critical data.
- CVE-2026-101745Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
- CVE-2026-101744High
Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit network attack via HTTP by a low-privileged user can lead to unauthorized modification and access to critical data and partial DoS, with potential impact on other products.
- CVE-2026-101740Low
Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability requires logon to the infrastructure and allows a low privileged attacker to gain unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data.
- CVE-2026-101739High
Vulnerability in Oracle Agile Engineering Data Management (component Engineering Communication Interface) affecting version 6.2.1. A difficult-to-exploit attack by a low-privileged user with logon to the infrastructure allows takeover of the system.
- CVE-2026-101738Low
Vulnerability in the Oracle Agile Engineering Data Management product (component: Engineering Communication Interface) affecting version 6.2.1. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized update, insert or delete access to some data.
- CVE-2026-101734Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 4.3 (confidentiality impact).
Original NVD description (English source)
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS