This vulnerability affects PeopleSoft Enterprise SCM Mobile Inventory Management version 9.2 and involves a security flaw that permits a low privileged attacker with logon access to compromise the system. The attack complexity is high, and no user interaction is required. The vulnerability impacts confidentiality and integrity with a scope change, meaning it can affect additional products beyond the initially vulnerable component. The CVSS 3.1 base score is 7.5, reflecting high severity. Oracle's Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue.

Successful exploitation can result in unauthorized creation, deletion, or modification of critical data within PeopleSoft Enterprise SCM Mobile Inventory Management, as well as unauthorized access to all accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. The scope change indicates that additional Oracle products related to PeopleSoft SCM Mobile Inventory Management may also be affected.

Oracle's Critical Patch Update advisory for July 2026 includes numerous security patches and strongly recommends customers apply patches without delay. However, the advisory does not explicitly confirm a patch for this specific vulnerability. Therefore, patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Customers should ensure they remain on actively supported versions and apply all relevant security updates promptly.