Based on the description, it is inferred that the flaw is a broken access control vulnerability in the eProcurement component of PeopleSoft Enterprise FIN Common Objects Argentina, which allows an attacker with low privileges and HTTP access to perform unauthorized creation, deletion, modification, or reading of critical data. The impact includes integrity loss and partial confidentiality compromise, identified as CWE‑200 (Information Exposure).

Affected by this vulnerability is Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1, the Argentine configuration of the PeopleSoft Financial Objects suite. No other versions or modules are mentioned, so the reach is limited to that exact deployment.

The CVSS base score of 5.9 classifies this as a medium‑severity issue, with low confidentiality impact and high integrity impact. The EPSS score is less than 1%, indicating little evidence of active exploitation, and the vulnerability is not included in CISA’s KEV catalog. However, given that an attacker only needs HTTP access and can operate with low privileges, the risk is real for installations exposed to public networks or untrusted segments.