Oracle Agile PLM CVE-2026-101565

Exploitation requires the attacker to already possess a local logon account on the server infrastructure where Oracle Agile PLM 9.3.6 executes (AV:L); it cannot be triggered remotely over the network. The affected feature is specifically the Import component of Agile PLM 9.3.6. No user interaction is required (UI:N) and attack complexity is low (AC:L), so once local access exists exploitation is straightforward. The principal limiting factors are: (1) the need for prior host-level/interactive access, which gates all remote adversaries; (2) impact restricted to reading data (C:H) with no write or denial capability (I:N/A:N); and (3) exposure limited to the single supported version 9.3.6 as stated by Oracle.

This is a moderate-severity, confidentiality-only vulnerability (CVSS 3.1 base 6.2, vector AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) in the Import component of Oracle Agile PLM 9.3.6. The key limiting signal is the LOCAL attack vector (AV:L): despite the vector carrying PR:N, Oracle's own description states the attacker needs 'logon to the infrastructure where Oracle Agile PLM executes' - so an attacker must already have a foothold (interactive/shell access) on the hosting server rather than reaching this over the network. This is a notable tension: the PR:N metric reads as 'unauthenticated' while AV:L plus the 'logon to the infrastructure' wording implies the attacker must first obtain host-level access, so the two signals should be read together - this is not a pre-auth remote flaw. Impact is confined to confidentiality (C:H, I:N, A:N): disclosure of critical Agile PLM data with no integrity or availability effect. No EPSS score, CISA KEV listing, SSVC decision data, or public POC was provided in the input, and no exploitation activity is indicated. Net assessment: a real but lower-priority issue - the local-access precondition and read-only impact substantially reduce real-world urgency compared to the headline 'unauthenticated' label. Patch it on the normal Oracle Critical Patch Update cadence; it is not an emergency unless untrusted users have local logon rights to the Agile PLM host.

An attacker who already has a local (interactive or shell) logon on the server where Oracle Agile PLM 9.3.6 runs abuses the Import component to read critical application data they should not be able to access, resulting in disclosure of all Agile PLM-accessible data. No public exploit code was identified at the time of analysis, and the low attack complexity (AC:L) means the technique is reliable once local access is obtained.