Description
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN Common Objects Brazil accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | PeopleSoft Enterprise FIN Common Objects Brazil | 9.1 | — |
Advisories 2
- NCSC-2026-0439 Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise NCSC-NL (Netherlands) · Oct 21, 2026
- WID-SEC-2026-4082 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
References
- Oracle Advisory vendor-advisory