CVE-2026-70693

Modified Modified - Updated After Analysis

Privilege Escalation in Oracle Agile Engineering Data Management

Publication date: 2026-08-18

Last updated on: 2026-08-26

Assigner: Oracle

Description

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-26

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-70693

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_engineering_data_management	6.2.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1. It allows a high-privileged attacker with local system access to potentially take over the system through human interaction by another person. The attack requires logon to the infrastructure where the software runs.

Detection Guidance

Detection requires manual review of Oracle Agile Engineering Data Management logs and configurations. Check for unusual activity in the Engineering Communication Interface component. Review user access logs for unauthorized privileged actions. No specific commands are provided in the available context.

Impact Analysis

If exploited, this vulnerability could lead to complete compromise of Oracle Agile Engineering Data Management, resulting in loss of confidentiality, integrity, and availability of the system and its data.

Compliance Impact

The vulnerability allows high privileged attackers to compromise Oracle Agile Engineering Data Management, potentially leading to unauthorized access, modification, or deletion of sensitive data. This could impact compliance with GDPR (data confidentiality and integrity) and HIPAA (protected health information security).

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Agile Engineering Data Management version 6.2.1. Restrict user privileges to minimize access for high-privileged accounts. Monitor logs for suspicious activity related to the Engineering Communication Interface component.

Hi! I’m here to help you understand CVE-2026-70693. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70