Description

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.5",
  "pubDate": "2026-08-18T21:18:07.040Z",
  "pubdate": "2026-08-18T21:18:07.040Z",
  "executiveSummary": "An unauthorized data access vulnerability affects the Oracle Agile PLM MCAD Connector product within Oracle Supply Chain, specifically targeting the CAX Client component version 3.6. This security flaw enables a low-privileged attacker with network access via HTTP to compromise the affected software, resulting in a severe breach of confidentiality. Successful exploitation leads to unauthorized access to critical data or complete access to all data accessible by the Oracle Agile PLM MCAD Connector. The vulnerability is characterized by a CVSS 3.1 Base Score of 6.5, reflecting a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The risk implications are significant for organizations utilizing the vulnerable connector, as internal intellectual property, computer-aided design data, and sensitive supply chain documentation managed by the application can be exposed. The attack vector is network-based, requiring low privileges and no user interaction, making it straightforward for an authenticated malicious insider or compromised low-privilege account to leverage the flaw. Mitigation relies heavily on applying official vendor patches or restricting network access to the vulnerable CAX Client component.",
  "technicalDetails": "The vulnerability resides within the CAX Client component of the Oracle Agile PLM MCAD Connector version 3.6. The root cause stems from insufficient access controls and authorization enforcement mechanisms within the application handling HTTP-based requests. Because the system fails to adequately validate whether a low-privileged authenticated user possesses the necessary permissions to access specific resources, unauthorized data exposure occurs. The attack vector is strictly network-based (AV:N), utilizing the HTTP protocol to interact with the vulnerable service. The attack complexity is low (AC:L), requiring minimal effort or specialized conditions for successful exploitation. Furthermore, the attack requires low privileges (PR:L), meaning the adversary must possess valid, authenticated user credentials within the system, but does not require administrative or elevated rights. No user interaction (UI:N) is mandated, allowing for automated or direct script-based exploitation. The scope remains unchanged (S:U), as the vulnerability is contained within the resource authorization boundaries of the Oracle Agile PLM MCAD Connector application itself. The attack flow begins with the low-privileged attacker establishing an HTTP connection to the target CAX Client endpoint. The attacker crafts unauthorized or manipulated HTTP requests targeting sensitive data repositories or internal data retrieval functions managed by the connector. Due to the lack of granular access checks in version 3.6, the server processes the request and returns the requested proprietary design files, metadata, or critical supply chain data. The post-exploitation impact is strictly localized to confidentiality (C:H), resulting in the unauthorized disclosure of critical data or complete access to all data accessible via the Oracle Agile PLM MCAD Connector. Integrity and availability impacts remain none (I:N, A:N), as the vulnerability does not inherently permit data modification, destruction, or denial of service conditions."
}