This vulnerability in Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) version 9.2 permits an unauthenticated attacker with network access over HTTP to compromise the system. The CVSS 3.1 base score is 7.5, reflecting high confidentiality impact without requiring privileges or user interaction. The vulnerability is classified under CWE-284 (Improper Access Control). Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this specific CVE in the provided content. No known exploits are reported in the wild at this time.

Successful exploitation can lead to unauthorized access to critical or all accessible data within PeopleSoft Enterprise SCM Manufacturing version 9.2. This compromises confidentiality but does not impact integrity or availability. The attacker does not require authentication or user interaction and can exploit the vulnerability remotely via HTTP.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory for current remediation guidance at https://www.oracle.com/security-alerts/cpujul2026.html. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict network access to the affected service where possible.