CVE-2026-61191
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in Oracle Agile Engineering Data Management (component: Document Management) version 6.2.1. A low privileged attacker with local access to the infrastructure can perform unauthorized update, insert, or delete operations on some data and cause a partial denial of service (partial DOS).
Risk Assessment
An attacker with local access can compromise data integrity and cause partial system unavailability.
Recommendation
Apply patches provided by Oracle and restrict local access to the system.
Other vulnerabilities in Oracle Agile Engineering Data Management
See all- CVE-2016-5518High
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
- CVE-2026-61186Critical
Vulnerability in Oracle Agile Engineering Data Management (Install component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data. It may also cause a hang or frequent crash (DOS).
- CVE-2016-3468Critical
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
- CVE-2026-71053High
Vulnerability in Oracle Agile Engineering Data Management (component: Web Services Security) affects version 6.2.1. An unauthenticated attacker can via HTTP, under difficult conditions, take over the product. CVSS 8.1.
- CVE-2026-71052High
Vulnerability in Oracle Agile Engineering Data Management (component: Web Services Security) affects version 6.2.1. A low-privileged attacker can via HTTP take over the product. CVSS 8.8.
- CVE-2026-70712Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Install) version 6.2.1. Difficult to exploit, requires high privileged attacker with local access, allows takeover of the system.
- CVE-2026-70709Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. Difficult to exploit, allows unauthenticated attacker via HTTP to unauthorized update, insert or delete of some data and read access to a subset of data.
- CVE-2026-70703High
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. A low-privileged attacker can compromise confidentiality and integrity of critical data via HTTP, potentially affecting other products (scope change).
- CVE-2026-70698Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Install) version 6.2.1. Easily exploitable, requires high privileged attacker with local access, allows takeover of the system.
- CVE-2026-70697High
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. A low-privileged attacker with access to the infrastructure can take over the system.
Original NVD description (English source)
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 4.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).