CVE-2026-87260: High severity Oracle Oracle Agile Engineering Data Management vulnerability
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Engineering Data Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Exploitation requires a low-privileged attacker to have access to the physical communication segment attached to the hardware running Oracle Agile Engineering Data Management. Systems where untrusted or insufficiently trusted users can access that local network segment are the relevant exposure scenario.
What level of access does an attacker need?
The attacker needs low privileges and adjacent-network access, meaning access to the physical communication segment connected to the affected hardware. No user interaction is required, and the attack complexity is low.
What could a successful attacker do?
A successful attack can provide unauthorized access to critical data or all data accessible to Oracle Agile Engineering Data Management. It can also allow unauthorized creation, deletion, or modification of that data.
Which version is identified as affected?
The affected supported version identified in the advisory is Oracle Agile Engineering Data Management 6.2.1, specifically its Engineering Communication Interface component.