This vulnerability resides in the Install component of Oracle Agile Engineering Data Management 6.2.1. It allows an unauthenticated attacker who can reach the physical communication interface attached to the host hardware to compromise the system. The attack requires a second human to interact with the system; no remote or network delivery is needed. The result is that an attacker can create, delete or alter critical data or acquire full read access to any data managed by the application, leading to significant confidentiality and integrity loss.

All installations of Oracle Agile Engineering Data Management version 6.2.1 are affected. The vulnerability is tied to the underlying component used for installation processes within the product. No other versions or product lines are listed as impacted.

The CVSS score of 7.3 indicates a high severity with high confidentiality and integrity impact. The EPSS score is not available, but the attack requires physical proximity and human interaction, which limits widespread exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting there are no known publicly documented exploits yet. Nevertheless, the combination of high impact and the easily exploitable physical access path demands immediate attention.