This vulnerability exists in the Cash Management component of Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1. It is easily exploitable by unauthenticated attackers over HTTP and results in a partial denial of service. The CVSS 3.1 base score is 5.3, reflecting an availability impact without confidentiality or integrity compromise. The vulnerability is categorized under CWE-400, indicating a resource exhaustion or denial of service condition. The official Oracle Critical Patch Update advisory for July 2026 does not explicitly confirm a patch for this vulnerability, though it strongly recommends applying available patches for Oracle products.

Successful exploitation allows an unauthenticated attacker to cause a partial denial of service on the affected PeopleSoft Enterprise FIN Common Objects Argentina 9.1 system. There is no impact on confidentiality or integrity. The availability impact is limited to partial service disruption.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying all relevant security patches promptly and remaining on actively supported versions. Until a patch is confirmed, consider restricting network access to the affected service to trusted users only.