The vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4 allows a low‑privileged attacker who can reach the system over HTTP to create, delete, or modify critical data, gain unauthorized access to all data, and potentially cause a partial denial of service. This impacts confidentiality, integrity, and availability as the attacker can manipulate business‑critical information and disrupt operations. The weakness corresponds to improper access control (CWE‑284).

Oracle Corporation’s Agile Product Lifecycle Management for Process 6.2.4, component Product Quality Management.

The CVSS Base Score of 8.3 indicates high severity, while the EPSS score is not available, so exploitation risk is undetermined but presumed high given the description of the vulnerability as easily exploitable. The vulnerability is not listed in the CISA KEV catalog. The likely attack path is an unauthenticated or low‑privilege HTTP request from an external network, potentially bypassing authentication or privilege checks. Risk remains high for exposed instances.