Executive brief
Oracle Agile Engineering Data Management is an enterprise data management system for product engineering data in supply chain operations. An unauthenticated attacker with physical access to the network segment connected to the hardware running this system can exploit a vulnerability in the Engineering Communication Interface to gain complete control over the system, compromising confidentiality, integrity, and availability of critical engineering data.
Technical details
This vulnerability in the Engineering Communication Interface component of Oracle Agile Engineering Data Management version 6.2.1 allows an unauthenticated attacker with physical access to the adjacent communication segment to compromise the system. The vulnerability is difficult to exploit and requires proximity to the hardware's network infrastructure. Successful exploitation results in complete system takeover with impacts across confidentiality, integrity, and availability. The CVSS 3.1 Base Score of 7.5 reflects the high impact despite the physical access requirement and high attack complexity.
Affected products
- Oracle Agile Engineering Data Management 6.2.1
Timeline
- 2026-08-18: disclosed