This vulnerability affects Oracle PeopleSoft Enterprise FIN General Ledger Argentina, specifically version 9.1. It permits a low privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized creation, deletion, or modification of critical data and the ability to cause a partial denial of service. The CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L) indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact. The vendor advisory from Oracle's July 2026 Critical Patch Update does not explicitly list a patch for this product version, and the remediation level is not specified.

Successful exploitation can lead to unauthorized modification of critical financial data within PeopleSoft Enterprise FIN General Ledger Argentina and cause a partial denial of service, impacting data integrity and availability. Confidentiality is not affected. The vulnerability requires network access and is difficult to exploit, limiting the likelihood of widespread exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches promptly and remaining on actively supported versions. Since no specific patch is listed for PeopleSoft Enterprise FIN General Ledger Argentina version 9.1 in the July 2026 update, monitor Oracle advisories for updates. Implement network-level controls to restrict HTTP access to the affected system where possible.