This vulnerability affects Oracle PeopleSoft Enterprise FIN Staffing Front Office version 9.2. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within the application. The CVSS 3.1 base score is 7.5, reflecting a high severity with an integrity impact (CVSS vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). The vulnerability is identified as CWE-284 (Improper Access Control). The vendor advisory references Oracle's Critical Patch Update for July 2026 but does not explicitly confirm a patch for this specific vulnerability in the provided content.

The vulnerability allows unauthorized attackers to modify critical data in the PeopleSoft Enterprise FIN Staffing Front Office application without authentication. This compromises data integrity, potentially affecting business operations relying on this data. There is no impact on confidentiality or availability reported. No known exploits in the wild have been reported at this time.

Oracle recommends applying security patches provided in their Critical Patch Update advisories without delay. Although the vendor advisory does not explicitly confirm a patch for this vulnerability, customers should review the July 2026 Critical Patch Update documentation and apply relevant patches for PeopleSoft Enterprise FIN Staffing Front Office version 9.2 as soon as they become available. Maintaining up-to-date software versions and promptly applying vendor patches is critical to mitigating this vulnerability.