CVE-2026-87262
HighCVSS 7.1Summary
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to gain unauthorized access to data and to update, insert or delete it.
Risk Assessment
An unauthenticated attacker with local network access can access and modify critical data, threatening the confidentiality and integrity of the system.
Recommendation
Update Oracle Agile Engineering Data Management to a version newer than 6.2.1 or apply the available patch. Restrict access to the physical communication segment and segment the network.
Other vulnerabilities in Oracle Agile Engineering Data Management
See all- CVE-2026-87261High
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to gain unauthorized access to data and to update, insert or delete it, and the attack may significantly impact additional products (scope change).
- CVE-2026-87260High
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with access to the physical communication segment to create, delete or modify data and gain unauthorized access to it.
- CVE-2026-87259High
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affecting version 6.2.1. An easily exploitable flaw allows a low privileged attacker with logon to create, delete or modify data and gain unauthorized access to it, and the attack may significantly impact additional products (scope change).
- CVE-2016-5518High
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices.
- CVE-2026-61186Critical
Vulnerability in Oracle Agile Engineering Data Management (Install component) allows an unauthenticated attacker via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data. It may also cause a hang or frequent crash (DOS).
- CVE-2016-3468Critical
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install.
- CVE-2026-71053High
Vulnerability in Oracle Agile Engineering Data Management (component: Web Services Security) affects version 6.2.1. An unauthenticated attacker can via HTTP, under difficult conditions, take over the product. CVSS 8.1.
- CVE-2026-71052High
Vulnerability in Oracle Agile Engineering Data Management (component: Web Services Security) affects version 6.2.1. A low-privileged attacker can via HTTP take over the product. CVSS 8.8.
- CVE-2026-70712Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Install) version 6.2.1. Difficult to exploit, requires high privileged attacker with local access, allows takeover of the system.
- CVE-2026-70709Medium
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) version 6.2.1. Difficult to exploit, allows unauthenticated attacker via HTTP to unauthorized update, insert or delete of some data and read access to a subset of data.
Original NVD description (English source)
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).