The vulnerability resides in Oracle Agile Engineering Data Management version 6.2.1 within the Engineering Communication Interface component and permits a low‑privileged attacker with network access to modify database contents. Successful exploitation results in unauthorized updates, inserts or deletes to data exposed by the application, thereby compromising data integrity. Based on the description, the weakness appears to be an improper access control flaw (inferred) that allows non‑privileged users to perform privileged data operations.

Affected systems are Oracle Agile Engineering Data Management version 6.2.1, as identified by the Oracle CNA. No other versions were reported to be impacted.

The CVSS 3.1 score of 3.1 indicates a low‑severity integrity impact with a user‑interaction requirement of none. Because the exploit requires network connectivity over HTTP and the attacker must already possess a low‑privileged account, the practical risk appears moderate. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting that active exploitation is not widely observed. Nonetheless, organizations running the affected product should address the flaw promptly to avoid potential data loss.