Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-101723 EUVD-2026-106124GHSA-xvgh-qpm4-j93c

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is …

Published Oct 20, 2026 · Updated Oct 22, 2026 · Assigned by oracle

Description

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Oracle Agile PLM MCAD Connector 3.6 —

Advisories 1

References