This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects version 9.2 and involves security weaknesses that allow a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation requires user interaction from a third party. The impact is unauthorized modification of critical data within the PeopleSoft Enterprise FIN Common Objects environment. The CVSS vector (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) indicates local attack vector, high attack complexity, low privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory indication of an official patch or fix specifically for this vulnerability as of the advisory date. The Oracle Critical Patch Update advisory referenced does not explicitly confirm patch availability for this specific issue.

The vulnerability can lead to unauthorized creation, deletion, or modification of critical data within PeopleSoft Enterprise FIN Common Objects. This impacts data integrity but does not affect confidentiality or availability. Exploitation requires local access with low privileges and user interaction, making it difficult to exploit. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches promptly when available. Until a patch is applied, limit access to the infrastructure where PeopleSoft Enterprise FIN Common Objects executes and educate users to avoid interacting with suspicious prompts or actions that could facilitate exploitation.