This vulnerability affects Oracle PeopleSoft Enterprise FIN Cash Management version 9.2 and is characterized by an easily exploitable flaw that permits a low privileged attacker with logon access to the infrastructure to compromise the product. The vulnerability impacts confidentiality, integrity, and availability, potentially allowing complete takeover of the PeopleSoft Enterprise FIN Cash Management component. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) indicates local attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. The vendor advisory from Oracle's July 2026 Critical Patch Update references multiple security patches but does not explicitly confirm a patch for this specific vulnerability. Customers are advised to apply available patches promptly. The product is not a cloud service, so remediation depends on customer action.

Successful exploitation of this vulnerability can lead to complete takeover of the PeopleSoft Enterprise FIN Cash Management product, affecting confidentiality, integrity, and availability of the system. Additionally, the attack may have a scope change impact, significantly affecting other Oracle products integrated or dependent on this component. The vulnerability requires only low privileges and local access to the infrastructure where the product runs.

Patch status is not yet confirmed for this specific vulnerability in the vendor advisory. Oracle's July 2026 Critical Patch Update advisory references multiple security patches across products, and customers are strongly recommended to remain on actively supported versions and apply all relevant security patches without delay. Since this is not a cloud service, remediation requires customer action to apply patches. Monitor Oracle's official security advisories and patch documentation for updates specific to PeopleSoft Enterprise FIN Cash Management 9.2.