A vulnerability in the Engineering Communication Interface component of Oracle Agile Engineering Data Management 6.2.1 enables a low‑privileged attacker who can reach the system over HTTP to create, modify, or delete critical data and to obtain unrestricted access to all data exposed by the system. The attacker can also trigger a partial denial of service. The CVSS vector indicates high confidentiality and integrity impacts and a lower availability impact, resulting in a base score of 8.4.

Oracle Agile Engineering Data Management version 6.2.1 is the only product explicitly affected in this advisory. The vulnerability may also influence other products in the Oracle Supply Chain suite due to a scope change, but no specific additional vendors or product versions are listed.

The CVSS score of 8.4 classifies this issue as high severity, and the vulnerability is deemed difficult to exploit yet still accessible for an attacker with network access. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating that no known exploit has been widely observed. However, the combination of network‑based access, low privilege execution, and the ability to compromise data integrity and availability warrants a high risk posture. Systems should be monitored for anomalous HTTP activity, and remediation should be prioritized.