This vulnerability affects Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland, specifically version 9.2. It is a difficult to exploit vulnerability that requires network access via HTTP and low privileges but can result in unauthorized creation, deletion, or modification of critical data within the affected product. The vulnerability scope may extend to other PeopleSoft Enterprise HCM products. The CVSS 3.1 vector indicates network attack vector (AV:N), high attack complexity (AC:H), low privileges required (PR:L), no user interaction (UI:N), scope change (S:C), and high confidentiality and integrity impacts (C:H/I:H), with no availability impact (A:N). Oracle has published a Critical Patch Update advisory in July 2026 referencing multiple patches but has not explicitly confirmed a patch for this specific CVE in the provided data.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data in PeopleSoft Enterprise HCM Global Payroll Switzerland, potentially compromising confidentiality and integrity of sensitive payroll data. The vulnerability also has a scope change impact, meaning it could affect additional PeopleSoft products beyond the Switzerland payroll component. There is no reported impact on availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until an official patch is confirmed and applied, restrict network access to the affected PeopleSoft component and monitor for unusual activity related to payroll data access. No vendor advisory states that no action is required or that the vulnerability is already mitigated.