The vulnerability resides in the Security component of Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2. An unauthenticated attacker with network access via HTTP can compromise the application. The attack allows malicious actors to perform unauthorized update, insert, or delete operations on data that is accessible through the application, effectively compromising data integrity. The described weakness is a form of improper authorization that permits changes without proper authentication.

Oracle PeopleSoft Enterprise SCM Manufacturing, version 9.2, part of the Oracle PeopleSoft portfolio. The affected component is the Security module. Earlier or later versions are not listed as impacted.

The CVSS score of 3.7 indicates a low-level threat. The EPSS score of < 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack path is via HTTP traffic to an exposed PeopleSoft application, with no authentication required. Because the weakness allows modification of data, an attacker could alter inventory or manufacturing data, but cannot easily obtain confidential information or disrupt service.