This vulnerability affects Oracle PeopleSoft Enterprise FIN Engineering Argentina component Engineering, version 9.1. A high privileged attacker with network access via HTTP can exploit this issue to gain unauthorized update, insert, delete, and read access to some accessible data. The CVSS 3.1 vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, and low confidentiality and integrity impact. The vendor advisory from Oracle does not explicitly confirm the availability of a patch or fix for this specific vulnerability in the July 2026 Critical Patch Update advisory, and no patch links are provided in the source data.

Successful exploitation can lead to unauthorized modification (update, insert, delete) and unauthorized reading of some data accessible through PeopleSoft Enterprise FIN Engineering Argentina 9.1. The impact on confidentiality and integrity is low, and availability is not affected. The vulnerability requires high privileges and network access via HTTP, and is considered difficult to exploit.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions. Until a patch is confirmed, restrict network access to the affected service to trusted users with high privileges and monitor for suspicious activity related to PeopleSoft Enterprise FIN Engineering Argentina.