Description

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.9",
  "pubDate": "2026-08-18T21:18:07.613Z",
  "pubdate": "2026-08-18T21:18:07.613Z",
  "executiveSummary": "An unauthenticated security vulnerability affects the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain, specifically within the CAX Client component version 3.6. This vulnerability is classified as difficult to exploit and requires the attacker to have access to the physical communication segment attached to the hardware where the Oracle Agile PLM MCAD Connector executes. Successful exploitation of this flaw can lead to unauthorized access to critical data, complete access to all data accessible by the Oracle Agile PLM MCAD Connector, and unauthorized update, insert, or delete access to a subset of the accessible data. The vulnerability carries a CVSS 3.1 Base Score of 5.9 with impacts strictly affecting Confidentiality and Integrity, while Availability remains unaffected. The CVSS vector is defined as CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N. Organizations utilizing the affected version must account for the physical network segment access requirement and implement appropriate segmentation and hardening controls to mitigate potential risks associated with unauthorized data manipulation and information disclosure.",
  "technicalDetails": "The vulnerability resides within the CAX Client component of the Oracle Agile PLM MCAD Connector version 3.6. The flaw stems from insufficient security controls or validation mechanisms handling communication over the local physical network segment, allowing an adversary who has achieved adjacent network positioning to interact directly with the vulnerable service. The attack vector is categorized as adjacent (AV:A), meaning the attacker must be physically or logically connected to the same local communication segment, such as the same subnet or physical hardware attachment point, where the Oracle Agile PLM MCAD Connector executes. Furthermore, the attack complexity is rated as high (AC:H), indicating that successful exploitation requires specialized conditions, precise timing, or configuration nuances to manipulate the underlying communication stream. The vulnerability does not require any user interaction (UI:N) or prior authentication (PR:N), enabling any unauthenticated entity positioned on the valid communication segment to initiate the attack sequence. Upon successful exploitation, the malicious actor can compromise the confidentiality and integrity of the application domain. Specifically, the payload behavior and post-exploitation impact allow the adversary to achieve unauthorized read access to critical data or comprehensive access to all data accessible by the Oracle Agile PLM MCAD Connector. Additionally, the attacker gains unauthorized write capabilities, allowing them to perform update, insert, or delete operations on a subset of the accessible data assets. The attack flow relies on intercepting or injecting crafted traffic directly into the local physical communication segment, bypassing authentication boundaries due to trust assumptions within the local deployment architecture, ultimately resulting in data compromise without destabilizing the overall availability of the service."
}