This vulnerability affects Oracle PeopleSoft Enterprise FIN Billing Argentina component Billing, version 9.1. It is an easily exploitable vulnerability that requires a high privileged attacker with network access via HTTP. Successful exploitation can lead to complete compromise of the affected system, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory references a July 2026 Critical Patch Update containing numerous patches across Oracle products but does not explicitly confirm a patch or remediation for this specific vulnerability. Patch status is therefore not yet confirmed and should be verified against the vendor advisory.

The vulnerability allows a high privileged attacker with network access to fully compromise PeopleSoft Enterprise FIN Billing Argentina 9.1, affecting confidentiality, integrity, and availability of the system. This could lead to unauthorized data access, modification, and disruption of service, effectively resulting in takeover of the affected product.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until an official patch is confirmed, restrict network access to the affected service to trusted users only and monitor for unusual activity consistent with high privilege misuse.