The vulnerability resides in Oracle Product Lifecycle Analytics. A local attacker who has logged on to the infrastructure where the product runs can exploit this flaw to gain unauthorized access to all data accessible by the product and to induce a partial denial of service. The flaw is classified as a local privilege escalation with a medium severity score of 6.1 on the CVSS vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L.

The affected vendor is Oracle Corporation, product Oracle Product Lifecycle Analytics, version 3.6.1. No other versions or products were enumerated.

With a CVSS base score of 6.1, the risk is moderate. The exploitation probability is not documented, and the vulnerability is not listed in the CISA KEV catalog. Because the attacker needs a local logon, the attack vector is likely an internal‑network or compromised account scenario. Successful exploitation could allow an attacker to read protected data or disrupt services partially.