This vulnerability affects Oracle Agile PLM MCAD Connector version 3.6 and involves a security flaw that permits a low privileged attacker who has logon access to the infrastructure hosting the product to compromise it. Successful exploitation results in unauthorized read access to a subset of data accessible by the product. The CVSS 3.1 base score is 2.5, reflecting low impact on confidentiality and no impact on integrity or availability. The attack vector requires local access with high attack complexity and low privileges, with no user interaction needed. No official patch or remediation level has been confirmed in the vendor advisory, and no known exploits are reported in the wild.

The impact is limited to unauthorized read access to some data accessible by Oracle Agile PLM MCAD Connector 3.6. There is no impact on data integrity or system availability. The vulnerability requires local access with high complexity and low privileges, making exploitation difficult.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and staying on actively supported versions. No specific mitigation steps are provided beyond applying available patches.