Threat Intelligence Database

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. While the vulnerability is in Oracle Agile PLM MCAD Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N).

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVE-2026-71089 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows an unauthenticated attacker with logon access to the infrastructure where the product executes to compromise it. Exploitation requires human interaction from a person other than the attacker and can lead to unauthorized read access to some accessible data. The vulnerability has a low severity with a CVSS 3.1 base score of 3.3, impacting confidentiality only.

CVE-2026-71081 is a low-severity vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows a high privileged attacker with logon access to the infrastructure where the product runs to perform unauthorized update, insert, or delete operations on accessible data. The vulnerability is difficult to exploit and impacts data integrity without affecting confidentiality or availability.

CVE-2026-71077 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows an unauthenticated attacker with physical access to the communication segment of the hardware running the software to compromise it. Exploitation can lead to unauthorized access to critical or all accessible data within the Oracle Agile PLM MCAD Connector. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with a high confidentiality impact but no impact on integrity or availability.

CVE-2026-71072 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows a low privileged attacker with logon access to the infrastructure to cause a partial denial of service. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 3.3, indicating a low severity issue. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.

CVE-2026-71069 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows a low privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Exploitation is considered difficult due to the required conditions. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.

CVE-2026-71066 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows an unauthenticated attacker with logon access to the infrastructure hosting the product to compromise it. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some accessible data, and partial denial of service. The CVSS 3.1 base score is 4.5, indicating a medium severity impact on confidentiality, integrity, and availability.