This vulnerability affects Oracle PeopleSoft Enterprise FIN Billing Argentina component Billing, specifically version 9.1. It is easily exploitable by a high privileged attacker with network access over HTTP. Successful exploitation can result in complete compromise of the PeopleSoft Enterprise FIN Billing Argentina system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this product/version. Customers are strongly advised to apply available patches promptly as per Oracle's general guidance.

The vulnerability allows a high privileged attacker with network access via HTTP to fully compromise the PeopleSoft Enterprise FIN Billing Argentina system version 9.1. This includes complete loss of confidentiality, integrity, and availability of the affected system, potentially leading to takeover of the application.

Oracle's July 2026 Critical Patch Update advisory does not explicitly confirm a patch for PeopleSoft Enterprise FIN Billing Argentina 9.1. Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends customers remain on actively-supported versions and apply security patches without delay. Until a specific patch is confirmed, monitor Oracle advisories closely and follow vendor instructions.