CVE-2026-61187

LowCVSS 2.8

Published: 21/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in Oracle Agile Engineering Data Management (version 6.2.1) allows a low-privileged attacker with user interaction to cause a partial denial of service.

Risk Assessment

An attacker could disrupt the Agile Engineering Data Management system, causing partial unavailability for users.

Recommendation

Apply the patch from Oracle for Oracle Agile Engineering Data Management version 6.2.1.

Original NVD description (English source)

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 2.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).