This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil, specifically version 9.1. It is classified under CWE-306 (Missing Authentication for Critical Function), CWE-287 (Improper Authentication), and CWE-284 (Improper Access Control). The CVSS 3.1 base score is 8.1, indicating high severity, with network attack vector requiring high attack complexity and no privileges or user interaction needed. Successful exploitation can result in complete takeover of the product. The vendor advisory does not explicitly confirm a patch availability or remediation level for this specific vulnerability but references the Oracle Critical Patch Update July 2026 advisory, which includes numerous patches across Oracle products. Customers are urged to remain on supported versions and apply patches without delay.

An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain full control over the PeopleSoft Enterprise FIN Common Objects Brazil product version 9.1. This includes complete compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity with a CVSS score of 8.1. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the Oracle Critical Patch Update July 2026 advisory for current remediation guidance at https://www.oracle.com/security-alerts/cpujul2026.html. Oracle strongly recommends customers apply security patches promptly and remain on actively supported versions. No specific temporary mitigations or workarounds are provided in the advisory for this vulnerability.