CVE-2026-61191: Medium severity Oracle Oracle Agile Engineering Data Management vulnerability
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 4.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Agile Engineering Data Management (Document Management)to a version that resolves this vulnerability.Fixed in 6.2.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61191?
The severity of CVE-2026-61191 is rated as medium with a score of 4.4.
Who is affected by CVE-2026-61191?
CVE-2026-61191 affects users of Oracle Agile Engineering Data Management version 6.2.1.
How do I mitigate CVE-2026-61191?
To mitigate CVE-2026-61191, upgrade to the latest version of Oracle Agile Engineering Data Management.
What type of vulnerability is CVE-2026-61191?
CVE-2026-61191 is an easily exploitable vulnerability that allows a low privileged attacker to gain unauthorized access.
When was CVE-2026-61191 published?
CVE-2026-61191 was published on July 21, 2026.