The vulnerability in Oracle Agile Product Lifecycle Management for Process version 6.2.4 allows a low‑privileged attacker who can reach the system over HTTP to create, delete, or modify critical data, gain unauthorized access to all data, and potentially cause a partial denial of service. This impacts confidentiality, integrity, and availability as the attacker can manipulate business‑critical information and disrupt operations. The weakness corresponds to resource consumption issues (CWE‑400).

Oracle Corporation’s Agile Product Lifecycle Management for Process 6.2.4, component Product Quality Management.

The CVSS Base Score of 8.3 indicates high severity, while the EPSS score is < 1%, indicating a very low but non‑zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack path is an unauthenticated or low‑privilege HTTP request from an external network, potentially bypassing authentication or privilege checks. Risk remains high for exposed instances.