A vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 that permits a high‑privileged attacker with network access via HTTP to perform unauthorized updates, inserts, deletes and read operations on accessible data. This is an improper access control flaw that can compromise the confidentiality and integrity of the application data, reflected in a CVSS 3.1 base score of 3.8.

The affected product is Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. No other versions or variants are listed as impacted.

The flaw can be exploited only by an attacker who has already attained high privileges, likely inside the organization or through compromised credentials, and can reach the application over HTTP. The CVSS score indicates Moderate impact to confidentiality and integrity, but the overall severity remains low. No public exploits are known, EPSS information is not available, and the vulnerability is not listed in CISA's KEV catalog. Nonetheless, any compromise of data writes or reads warrants prompt attention and mitigation.