This vulnerability affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically version 9.1. It is easily exploitable by unauthenticated attackers over the network via HTTP. Successful exploitation can result in unauthorized creation, deletion, or modification of critical data, unauthorized read access to a subset of data, and partial denial of service conditions. The scope of impact may extend beyond the Argentina-specific product to other PeopleSoft Enterprise FIN Common Objects products. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, scope change, and impacts on confidentiality (low), integrity (high), and availability (low). The vendor advisory does not explicitly confirm patch availability or remediation status for this specific vulnerability but references the Oracle Critical Patch Update Advisory July 2026, which includes numerous patches across Oracle products.

The vulnerability allows unauthenticated remote attackers to compromise the affected PeopleSoft product, leading to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and partial denial of service. The impact affects confidentiality, integrity, and availability, with integrity impact rated high. The vulnerability's scope change means it may affect additional PeopleSoft products beyond the Argentina-specific component.

Patch status is not yet confirmed — check the Oracle Critical Patch Update Advisory for July 2026 at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict network access to the affected PeopleSoft Enterprise FIN Common Objects Argentina 9.1 instance to trusted users only and monitor for unusual activity related to this product.