Description
Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Inventory Brazil executes to compromise PeopleSoft Enterprise FIN Inventory Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Inventory Brazil. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-09-15
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Full takeover of PeopleSoft Enterprise FIN Inventory Brazil
Action: Apply Patch
AI Analysis

Impact

This vulnerability exists in the Inventory component of Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1. It allows a locally logged‑in, low‑privileged user to compromise the application, potentially leading to full system takeover. The flaw is assessed with a CVSS 3.1 Base Score of 7.8, reflecting confidentiality, integrity, and availability impacts. It is identified as CWE‑269.

Affected Systems

Oracle Corporation’s PeopleSoft Enterprise FIN Inventory Brazil, version 9.1, operating on any supported infrastructure where the application is deployed.

Risk and Exploitability

The attack vector is local, requiring only that the attacker have a user logon on the host. The privilege level needed is low, the attack is not required to be remote or involve user interaction, and the flaw is readily exploitable. With a CVSS score of 7.8 and an EPSS score of <1%, the risk remains high for environments that still run the vulnerable version.

Generated by OpenCVE AI on September 20, 2026 at 09:26 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest security patch or upgrade Oracle PeopleSoft Enterprise FIN Inventory Brazil to a supported version.
  • Restrict local logon accounts to the minimum privileges necessary and enforce least‑privilege policies for the PeopleSoft environment from other systems to limit lateral movement.
  • Enable logging and monitor for unusual activity that could indicate exploitation of this flaw.

Generated by OpenCVE AI on September 20, 2026 at 09:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 19 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 18 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Title PeopleSoft FIN Inventory Brazil Vulnerability Allows Full Takeover by Low‑Privilege Users
Weaknesses CWE-284
CWE-862

Thu, 17 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269

Thu, 17 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Title PeopleSoft FIN Inventory Brazil Vulnerability Allows Full Takeover by Low‑Privilege Users
Weaknesses CWE-284
CWE-862

Tue, 15 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
Description Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Inventory Brazil executes to compromise PeopleSoft Enterprise FIN Inventory Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Inventory Brazil. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
First Time appeared Oracle
Oracle peoplesoft Enterprise Fin Inventory Brazil
CPEs cpe:2.3:a:oracle:peoplesoft_enterprise_fin_inventory_brazil:9.1:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle peoplesoft Enterprise Fin Inventory Brazil
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Oracle Peoplesoft Enterprise Fin Inventory Brazil
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-09-17T13:00:16.314Z

Reserved: 2026-08-31T15:40:57.342Z

Link: CVE-2026-83147

cve-icon Vulnrichment

Updated: 2026-09-17T12:51:08.677Z

cve-icon NVD

Status : Deferred

Published: 2026-09-15T20:18:25.410

Modified: 2026-09-17T14:17:34.393

Link: CVE-2026-83147

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T09:30:18Z

Weaknesses
  • CWE-269

    Improper Privilege Management