This vulnerability exists in Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically version 9.1. It is easily exploitable remotely without authentication over HTTP, allowing attackers to compromise the system. Successful exploitation can lead to unauthorized access to sensitive data, unauthorized data modification (insert, update, delete), and partial denial of service conditions. The vulnerability has a high severity rating with a CVSS 3.1 score of 9.9, indicating critical impact on confidentiality, integrity, and availability. The vendor advisory from Oracle does not explicitly confirm a patch or remediation level for this specific vulnerability as of the advisory date.

Exploitation of this vulnerability can result in unauthorized access to critical data within PeopleSoft Enterprise FIN Common Objects Argentina, unauthorized modification of some accessible data, and the ability to cause a partial denial of service. The vulnerability affects confidentiality (high impact), integrity (low impact), and availability (low impact). The scope of impact may extend beyond the initially affected product to additional related Oracle products.

Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions. Until a patch is confirmed, restrict network access to the affected product where possible and monitor Oracle advisories for updates.