CVE-2026-70698

MediumCVSS 6.7

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in Oracle Agile Engineering Data Management (component: Install) version 6.2.1. Easily exploitable, requires high privileged attacker with local access, allows takeover of the system.

Risk Assessment

Risk of complete takeover of Oracle Agile Engineering Data Management, potentially leading to loss of confidentiality, integrity, and availability of data.

Recommendation

Apply security patches from the vendor and restrict local access to the infrastructure.

Original NVD description (English source)

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).