Threats affecting pkg:maven/com.oracle.peoplesoft/fin-inventory-brazil

A vulnerability exists in Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. The vulnerability has a high severity with a CVSS 3.1 base score of 7.8, impacting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.