CVE-2026-61187

Analyzed Analyzed - Analysis Complete

Oracle Agile Engineering Data Management Partial Denial of Service

Publication date: 2026-07-21

Last updated on: 2026-07-28

Assigner: Oracle

Description

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 2.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-28

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-61187

EUVD

EUVD-2026-47394

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_engineering_data_management	6.2.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-404	The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows a low-privileged attacker with local access to partially disrupt the service through a denial of service attack. Exploitation requires another person's unintentional interaction.

Detection Guidance

This vulnerability is specific to Oracle Agile Engineering Data Management version 6.2.1 and requires local system access with low privileges. Detection may involve checking installed software versions and monitoring for unusual activity in the application. No specific commands are provided in the context.

Impact Analysis

If you use Oracle Agile Engineering Data Management 6.2.1, an attacker with local access could cause partial service disruption. This may lead to temporary unavailability of the product for your operations.

Compliance Impact

This vulnerability has a low impact on compliance with standards like GDPR or HIPAA. It only causes partial denial of service and requires human interaction beyond the attacker, limiting its ability to disrupt critical systems or expose sensitive data.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Agile Engineering Data Management version 6.2.1. Ensure proper access controls are in place to limit logon privileges for users. Monitor system logs for unusual activity related to partial denial of service attempts.

Hi! I’m here to help you understand CVE-2026-61187. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70