This vulnerability affects Oracle Agile PLM MCAD Connector version 3.6 and involves a security weakness that allows a high privileged attacker who has logged onto the infrastructure where the product runs to compromise it. Exploitation requires human interaction from a person other than the attacker. The impact is limited to unauthorized read access to a subset of accessible data. The CVSS 3.1 base score is 1.8, reflecting low confidentiality impact and no integrity or availability impact. There is no explicit remediation level or patch information provided in the vendor advisory, but Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program.

The vulnerability allows unauthorized read access to some data within Oracle Agile PLM MCAD Connector 3.6 when exploited by a high privileged attacker with infrastructure logon and requires human interaction. There is no impact on data integrity or availability. The overall impact is low severity.

Oracle has not explicitly stated a patch or fix specifically for this vulnerability in the advisory. However, Oracle strongly recommends that customers remain on actively supported versions and apply all relevant security patches from their Critical Security Patch Updates without delay. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance.