EUVD-2026-62011
GHSA-xjm8-fr3w-hjjm
Severity by source
AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Local vector and high complexity confirmed by logon-to-infrastructure prerequisite; PR:N because no account privilege needed beyond infrastructure access; UI:R and low-level CIA impacts per description.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).
AnalysisAI
Local exploitation of Oracle Agile PLM MCAD Connector version 3.6 enables an unauthenticated attacker with infrastructure-level logon to partially compromise the CAX Client component, resulting in limited unauthorized read, write, and denial-of-service impact. Exploitation is constrained by both high attack complexity and a mandatory human interaction requirement from a third party, making opportunistic attacks unlikely. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have local logon access to the specific infrastructure host where Oracle Agile PLM MCAD Connector 3.6 and its CAX Client component are installed - remote network exploitation is not possible given AV:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 4.5 Medium is consistent with the constrained attack surface: AV:L limits the attacker to the same host or infrastructure where the CAX Client runs, AC:H signals that exploitation is non-trivial and requires specific conditions to align, UI:R means a legitimate user must take some action for the attack to succeed, and all three impact metrics are low (C:L/I:L/A:L), indicating only partial compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patches released by Oracle in the August 2026 Critical Security Patch Update, available at https://www.oracle.com/security-alerts/cspuaug2026.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Agile Plm Mcad Connector
View allApache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursio
Full takeover of Oracle Agile PLM MCAD Connector 3.6 is achievable by a low-privileged network attacker targeting the CA
Full system takeover of Oracle Agile PLM MCAD Connector 3.6 is achievable by unauthenticated network attackers over HTTP
Full system takeover in Oracle Agile PLM MCAD Connector 3.6 is achievable by a low-privileged network attacker via HTTP,
Unauthorized data disclosure in Oracle Agile PLM MCAD Connector 3.6 allows any low-privileged authenticated attacker wit
Authentication bypass in Oracle Agile PLM MCAD Connector 3.6 (CAX Client component) exposes critical PLM data to unauthe
Apache Groovy provides extension methods to aid with creating temporary directories. Rated medium severity (CVSS 5.5), t
Unauthenticated network access to Oracle Agile PLM MCAD Connector 3.6 exposes a subset of data managed by the CAX Client
Unauthorized data read in Oracle Agile PLM MCAD Connector 3.6 exposes a subset of PLM-accessible data to unauthenticated
Confidentiality compromise in Oracle Agile PLM MCAD Connector 3.6 (CAX Client component) allows an unauthenticated attac
Unauthorized data disclosure in Oracle Agile PLM MCAD Connector 3.6 allows a low-privileged network attacker to gain com
Partial authentication bypass in Oracle Agile PLM MCAD Connector 3.6 exposes confidentiality and integrity of accessible
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today