This vulnerability affects Oracle PeopleSoft Enterprise FIN eSettlements version 9.2. It is an easily exploitable issue that requires the attacker to have high privileges and logon access to the infrastructure hosting the product. Successful exploitation results in unauthorized read access to a subset of data accessible by PeopleSoft Enterprise FIN eSettlements. The CVSS vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and low confidentiality impact with no integrity or availability impact. No official patch or remediation level is stated in the advisory, and no known exploits are reported in the wild. Oracle's Critical Patch Update advisory for July 2026 does not explicitly mention a fix for this specific vulnerability, so patch status is not confirmed and users should consult the vendor advisory for updates.

The impact is limited to unauthorized read access to some data within PeopleSoft Enterprise FIN eSettlements. There is no impact on data integrity or system availability. The attacker must already have high privileges and logon access to the infrastructure, which limits the scope of exploitation. The overall severity is low.

Patch status is not yet confirmed—check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Since no official fix or temporary workaround is explicitly stated, organizations should monitor Oracle advisories for updates and restrict high privileged access to the infrastructure hosting PeopleSoft Enterprise FIN eSettlements.