This vulnerability affects Oracle Agile PLM MCAD Connector version 3.6. An unauthenticated attacker with logon access to the underlying infrastructure can exploit this flaw, but successful exploitation requires user interaction from a third party. The vulnerability results in unauthorized read access to a subset of data accessible by the product. The CVSS 3.1 base score is 3.3, reflecting low severity with limited confidentiality impact and no integrity or availability impact. No official patch or remediation level is stated in the vendor advisory, but Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program. The vendor advisory does not explicitly mention a fix for this specific vulnerability, so patch status is not yet confirmed and should be verified via Oracle's security alerts.

Successful exploitation can lead to unauthorized read access to some data accessible by Oracle Agile PLM MCAD Connector, potentially exposing confidential information. There is no impact on data integrity or system availability. Exploitation requires that the attacker has logon access to the infrastructure and that another user performs some interaction, limiting the ease of exploitation.

Oracle's advisory does not specify a dedicated patch for this vulnerability but emphasizes the importance of applying Critical Security Patch Updates promptly. Users of Oracle Agile PLM MCAD Connector version 3.6 should ensure they are running supported versions and apply all relevant Oracle security patches without delay. Patch status for this specific vulnerability is not confirmed; therefore, check Oracle's official security alerts for updates and remediation guidance.