This vulnerability affects Oracle PeopleSoft Enterprise FIN Manufacturing Argentina version 9.1. It is easily exploitable by unauthenticated attackers over the network via HTTP. Exploitation can result in unauthorized creation, deletion, or modification of critical data, or unauthorized access to all accessible data within the product. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, reflecting network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and high confidentiality and integrity impacts with no availability impact. The vendor advisory references the Oracle Critical Patch Update for July 2026 but does not explicitly confirm a patch for this specific vulnerability.

An unauthenticated attacker with network access can fully compromise the confidentiality and integrity of data in PeopleSoft Enterprise FIN Manufacturing Argentina version 9.1. This includes unauthorized creation, deletion, or modification of critical data or complete access to all accessible data within the product. There is no impact on availability reported. The vulnerability is rated critical with a CVSS score of 9.1.

Patch status is not yet confirmed — check the Oracle Critical Patch Update July 2026 advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict network access to the affected product to trusted users only and monitor for unusual activity related to PeopleSoft Enterprise FIN Manufacturing Argentina.