Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data as well as unauthorized read access to a subset of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cspuaug2026.html |
|
History
Wed, 26 Aug 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated HTTP-based Data Modification in Oracle Agile Engineering Data Management |
Wed, 26 Aug 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated HTTP Access Enables Unauthorized Data Modification and Exposure in Oracle Agile Engineering Data Management | |
| Weaknesses | CWE-287 |
Wed, 26 Aug 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 | |
| Metrics |
ssvc
|
Fri, 21 Aug 2026 07:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated HTTP Access Enables Unauthorized Data Modification and Exposure in Oracle Agile Engineering Data Management | |
| Weaknesses | CWE-287 |
Wed, 19 Aug 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Data Modification and Exposure in Oracle Agile Engineering Data Management 6.2.1 | |
| Weaknesses | CWE-200 CWE-284 |
Wed, 19 Aug 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Data Modification and Exposure in Oracle Agile Engineering Data Management 6.2.1 | |
| Weaknesses | CWE-200 CWE-284 |
Tue, 18 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data as well as unauthorized read access to a subset of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). | |
| First Time appeared |
Oracle
Oracle agile Engineering Data Management |
|
| CPEs | cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle agile Engineering Data Management |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-08-18T21:01:08.092Z
Updated: 2026-08-26T18:56:18.208Z
Reserved: 2026-08-04T22:06:34.591Z
Link: CVE-2026-70709
Vulnrichment
Updated: 2026-08-26T17:20:14.571Z
NVD
Status : Awaiting Analysis
Published: 2026-08-18T21:17:23.140
Modified: 2026-08-26T20:17:58.763
Link: CVE-2026-70709
Redhat
No data.