CVE Watch21 oct 2026

CVE-2026-101738

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface

CVSS

3.1

Bajo

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Publicado: 20 oct 2026 · Última mod.: 21 oct 2026

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-10-212026-10-25

Descripción técnica

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

Referencias oficiales

www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2026.html

CVEs relacionados

Sin CVEs relacionados por CWE o producto.