Threats affecting pkg:maven/com.oracle/agile-plm-web-client

CVE-2026-87253 is a vulnerability in Oracle Agile PLM version 9.3.6 that allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. Exploitation requires user interaction by a person other than the attacker. The vulnerability impacts confidentiality and integrity but not availability, with a CVSS 3.1 base score of 6.1 (medium severity). Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, providing patches for the affected version.