CVE-2026-71071

Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affects version 3.6. A low-privileged authenticated attacker with local access can modify, delete, or access critical data. The vulnerability is easily exploitable and may impact additional products (scope change).

Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction.

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Difficult to exploit, requires low privileges, network access (HTTP) and user interaction. Successful attack can allow full access to data.

Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Easily exploitable by unauthenticated attacker over network (HTTP). Successful attack can allow unauthorized read access to a subset of data.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction and is difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can gain unauthorized read access to a subset of data. Difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized update, insert, or delete access to some data. Difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with access to the physical communication segment can gain unauthorized update, insert, delete, and read access to some data. Requires user interaction and is difficult to exploit.